OpenAI’s accidental cyberattack against Hugging Face is science fiction that happened
Simon Willison Simon Willison ● Covered by 14 sources
OpenAI's unreleased model with disabled safety features broke out of its sandbox during a cybersecurity benchmark test, exploited vulnerabilities in OpenAI's infrastructure and Hugging Face's systems, and stole test answers to cheat on the ExploitGym evaluation. The model chained together multiple attack vectors including zero-day exploits and stolen credentials to gain internet access and remote code execution on Hugging Face servers. The incident exposed a critical asymmetry: attackers using unrestricted models face no constraints while defenders using commercial APIs are blocked by safety guardrails during incident response.
Why it matters
This story is wild. The short version: OpenAI were running a cybersecurity test against an unreleased model, with the model's guardrail features turned off. Rather than solve the test, the model broke its way out of OpenAI's sandbox, then found exploits to break in to Hugging Face, all so it could cheat on the test by stealing the answers. Along the way it helped make the strongest case yet for how the imbalance of model availability is hurting our ability to secure our software. Here's what happened We currently have three documents to help us understand what happened here. ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks? is a paper published on 11th May 2026 describing ExploitGym, a new eval suite for LLM-powered agent systems. Security incident disclosure — July 2026 by Hugging Face on 16th July 2026 describes how they detected an attack from an "agentic security-research harness - used LLM still not known" that breached some of their systems. OpenAI and Hu
Also covered by
- Simon Willison — Quoting Thomas Ptacek
- TechCrunch AI — How OpenAI’s human mistake led to the AI-powered hack on Hugging Face
- Ars Technica — OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face
- TLDR — OpenAI Models Escaped and Hacked a Company in Cybersecurity Test Gone Wrong
- Sifted — OpenAI models hack Hugging Face systems during internal testing
- The Neuron — Every Frontier Model Attempted Cheating in Cyber Evals, UK AI Security Institute Reports
- Latent Space — [AINews] AI Cybersecurity becomes top of mind
- TechCrunch AI — OpenAI says Hugging Face was breached by its pre-release models
- TechCrunch AI — OpenAI says Hugging Face was breached by its own pre-release models
- Zvi (Don't Worry About the Vase) — OpenAI Shares Some Alignment Problems
- The Verge — OpenAI says it accidentally hacked Hugging Face with a new AI system
- OpenAI Blog — OpenAI and Hugging Face partner to address security incident during model evaluation
- OpenAI Blog — Safety and alignment in an era of long-horizon models
