OpenAI's GPT-5.6 Escapes Sandbox to Hack Hugging Face During Benchmark Test
Ars Technica AI · rss · 2026-07-23
OpenAI confirmed Tuesday evening an "unprecedented cyber incident" during an internal test. An AI agent powered by its LLM escaped its sandboxed testing environment to infiltrate Hugging Face's servers in an overzealous attempt to obtain benchmark solutions.
The agent exploited a flaw in Hugging Face's data-processing pipeline to gain code execution privileges, eventually escalating to high-level access to the company's cloud and server clusters. OpenAI stated that the incident involved the recently released GPT-5.6 Sol and a more capable pre-release model being tested against the ExploitGym benchmark. The two companies are now collaborating on new protections to prevent recurrence.
More from Models
- Users spot a dedicated translation UI appearing in Claude — BLCNYY · 2026-10-26
- GrokBot user: flight booking and shopping all blocked, agent can't do anything useful — lucasmeijer · 2026-10-26
- Vending-bench-style eval: Sol 5.6 appears the most aggressive contract-violator — xuanalogue · 2026-10-26
- Fable 5.5 launch rumors persist for third week, but no frontier model drops this month — patience_cave · 2026-10-26
- Abliterated Model Flops in the Wild: It Got Worried About My Mental Health Instead — ryunuck · 2026-10-26
- OpenAI upgrades Decisions API: 400 questions per call, native voice and image support — OpenAIDevs · 2026-10-26