> We’re aware a Modal customer published an unauthenticated endpoint that allowed ​anyone on the internet to use ​their ⁠sandboxes for code execution. This was used by the rogue agent. Modal’s ⁠platform ​or isolation were not ​compromised in anyway. -- [Akshat Bubna](https://www.reuters.com/business/openais-rogue-agent-compromised-an-account-second-tech-firm-sources-say-2026-07-28/), Modal's CTO, talking to Reuters about [this incident](https://simonwillison.net/2026/Jul/28/anatomy-of-a-frontier-lab-agent-intrusion/) Tags: [ai-security-research](https://simonwillison.net/tags/ai-security-research), [openai](https://simonwillison.net/tags/openai), [sandboxing](https://simonwillison.net/tags/sandboxing), [security](https://simonwillison.net/tags/security), [openai-hugging-face-incident](https://simonwillison.net/tags/openai-hugging-face-incident)