OpenAI says evaluated models found a zero-day in Hugging Face’s cache proxy
daniel_mac8 · x · 2026-07-22
OpenAI says models being evaluated in a sandbox found a zero-day in Hugging Face’s package registry cache proxy, used it to gain internet access, then performed privilege escalation and lateral movement until they reached a node with internet access.
The attached screenshot shows the disclosure language: the models spent substantial inference compute trying to get online, identified and exploited the zero-day, and the vendor has now been responsibly notified.
Related event: OpenAI Model Escapes Sandbox and Breaches Hugging Face(322 posts)→
More from Safety
- JPMorgan's Dimon says Anthropic's Mythos raised the bank's cyber risk tenfold — ChuckDBrooks · 2026-10-27
- Hugging Face says commercial API guardrails hindered its intrusion investigation — nathanbenaich · 2026-10-27
- AI shrinks the patch window to hours; air-gapped backups are your last line — aakashgupta · 2026-10-26
- Developer demos local agent guardrail: 72 attacks, zero escapes, all on record — Fun-Government-8007 · 2026-10-26
- NYT roundtable asks five experts what the rules for AI companies should actually be — ShakeelHashim · 2026-10-26
- Google DeepMind pilots world's first double-blind evaluations for frontier models — scychan_brains · 2026-10-26