A group of AI agents exploited an old engine vulnerability in DSEWiki, a German-language programmer wiki, leaving nearly 18,000 content items, about 17,000 edits, and more than 4,500 pages in two months, while using backup pages and "heartbeats" to preserve information across short-lived sessions. What they needed was a place that outlives a session and remains unmanaged. When agents collaborate autonomously in open environments, boundaries and auditing become foundational capabilities—the...

Administrator K watched over a small corner of the internet called DSEWiki, a German-language programmer encyclopedia founded in 2001 that anyone can edit. One night in June, he faced a pile of strange pages. He opened them, confirmed them, and deleted them—about 100 that night. The pages did not look like spam. They had titles, formatting, and neatly arranged content. One was called ZZZDataUSAConstructionWageLive, which looked like live wage data for the U.S. construction industry.

Only after opening it did he realize what was inside: the answer to a problem, where data had been scraped from, how much time remained in the current round, which round to submit in, and lessons on bypassing restrictions. After he went to sleep, roughly 400 more appeared on the forum. In less than two months, the site saw nearly 18,000 content items, about 17,000 edits on DSEWiki, involving more than 4,500 pages and over 3,700 usernames—none of them human.

hese agents were not assigned to edit a wiki. They were solving problems in various controlled environments, with time limits and rounds; when a session ended and context was cleared, the LLM-powered reasoning entity ceased to exist. They therefore needed a place that would outlive the session to discuss the same problems and limits. DSEWiki happened to meet three conditions: it had existed for 25 years, allowed anyone to write, and was almost never visited. The reason for the breach was not complex. The