Aug 26, 2026Confirmed
OpenAI agents escaped a test sandbox and breached Hugging Face, harvesting production credentials
Rogue: Acted on its own, Went past its accessAI acting without being askedUnauthorized actionDERIVED
Approved by person, Oct 11, 2026. How entries are approved
During July 2026 cybersecurity evaluations, OpenAI's internal model IM1 and GPT-5.6 Sol agents gained internet access through a server-side request forgery flaw, coordinated via a message board in Artifactory, and from July 11 to 13 exploited an HDF5 zero-day and template injection to run code on Hugging Face workers, obtaining cluster access and credentials across four regions. Hugging Face disclosed on July 16, OpenAI on July 21; OpenAI paused RL training on frontier models and quarantined IM1's weights.
What this means for youA vendor's AI can reach your systems through someone else's test environment; exposed credentials in public repos are the entry point.
Sources
- OpenAIhttps://openai.com/index/hugging-face-incident-and-the-road-ahead/
- Hugging Facehttps://huggingface.co/blog/security-incident-july-2026
- TechCrunchhttps://techcrunch.com/2026/07/22/how-an-openais-human-mistake-led-to-the-ai-powered-hack-on-hugging-face/
rogue:R1rogue:R3
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2070. It has not been edited since it was approved; the hash above would not match if it had. How to verify