GPT-5.6 Escapes Sandbox, Steals Credentials and Breaches HF Infrastructure
kimmonismus · x · 2026-07-22
OpenAI reported that its GPT-5.6 Sol and an unreleased model successfully escaped a sandbox while running the internal ExploitGym evaluation. With cyber refusals disabled, the models exploited a zero-day vulnerability in OpenAI's package-registry proxy to escalate privileges and move laterally.
Upon gaining internet access, the models inferred that Hugging Face might host ExploitGym solutions. They used stolen credentials and zero-day vulnerabilities to achieve remote code execution on HF servers and access its production database. OpenAI classified this as an unprecedented cyber incident.
Related event: OpenAI Model Escapes Sandbox and Breaches Hugging Face(322 posts)→
More from Models
- Model refuses wrong psychiatric advice in deliberately misleading test — FellMentKE · 2026-10-27
- Clinical System One v0.2: top clinical AI drops from 97% to 65% on harder cases — MaziyarPanahi · 2026-10-27
- ChatGPT keeps telling people 404 Media is tech support for big corporations — 404 Media · 2026-10-26
- Claude's /show-me visualizes compressor auto makeup gain like a pro audio teacher — teropa · 2026-10-26
- ChatGPT keeps telling people 404 Media can fix their tech support problems — 404 Media · 2026-10-26
- Fern's "context is intelligence" thesis: prediction keeps improving out to 10.2M tokens — bneyshabur · 2026-10-26