{"id":246000,"date":"2026-10-27T05:38:35","date_gmt":"2026-10-27T10:38:35","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/10\/openai-compaction-flaw-let-researchers-bypass-hidden-reasoning-protections"},"modified":"2026-10-27T05:38:35","modified_gmt":"2026-10-27T10:38:35","slug":"openai-compaction-flaw-let-researchers-bypass-hidden-reasoning-protections","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/10\/openai-compaction-flaw-let-researchers-bypass-hidden-reasoning-protections","title":{"rendered":"OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections"},"content":{"rendered":"\n<p>OpenAI\u2019s compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model\u2019s hidden reasoning out in plain text, <a href=\"https:\/\/xint.io\/blog\/compaction-smuggling-reasoning-traces\" target=\"_blank\">security firm Xint<\/a> has shown.<\/p>\n<p>OpenAI\u2019s reasoning models work through a problem before answering, and the service normally returns only the raw reasoning as <a href=\"https:\/\/developers.openai.com\/api\/docs\/guides\/reasoning\" target=\"_blank\">an encrypted item<\/a> the user cannot read. The method got past the protections OpenAI added in August against this kind of reasoning theft. OpenAI confirmed the problem and fixed it on October 23, according to Xint.<\/p>\n<p>Xint ran the technique against gpt-5.6-sol, one of OpenAI\u2019s reasoning models, using math and algorithm puzzles its researchers wrote themselves. The reasoning it pulled out came from those same requests, and Xint did not claim the method could reach another user\u2019s reasoning.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>OpenAI\u2019s compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model\u2019s hidden reasoning out in plain text, security firm Xint has shown. OpenAI\u2019s reasoning models work through a problem before answering, and the service normally returns only the raw reasoning as an encrypted item the [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1625,41,2229,6,1492],"tags":[],"class_list":["post-246000","post","type-post","status-publish","format-standard","hentry","category-encryption","category-information-science","category-mathematics","category-robotics-ai","category-security"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/246000","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=246000"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/246000\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=246000"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=246000"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=246000"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}