It didn’t do anything “by itself”, it was running a hacking test and OpenAI hadn’t provided a properly secure environment.