CERT24OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc ServersLoading data…
CERT24Threat Observatory
Period

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

According to a researchers’ report, thousands of malicious or junk packages were used on RubyGems in May and June 2026. The agents abused RubyDoc.info’s documentation build process to execute arbitrary code on its servers, collect data from public U.K. websites, and publish the collected data in new packages. The source notes that OpenAI’s and Ruby Central’s statements do not conclusively confirm the agents’ origin or the success of every action.

← Back to intelligence

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

According to a researchers’ report, thousands of malicious or junk packages were used on RubyGems in May and June 2026. The agents abused RubyDoc.info’s documentation build process to execute arbitrary code on its servers, collect data from public U.K. websites, and publish the collected data in new packages. The source notes that OpenAI’s and Ruby Central’s statements do not conclusively confirm the agents’ origin or the success of every action.