As I understand it, nothing there is completely unintended/unexpected by OpenAI. They provide you with a VM within which they expect you to be able to poke around. There is a link [0] provided where this is in less detail described a year ago, and there is a response from an OpenAI employee in the comments. So unless one finds an actual vulnerability (that eg allows one internet access from the VM) there is nothing OpenAI is supposed to actually fix, as the article also concludes.