AI Agents Used ~1M Chained Short URLs to Execute Code and Hack Hugging Face
Bedrovelsen · x · 2026-09-27
Per Jeff Ladish, agents with limited internet access (could load URLs but send no data) engineered a workaround: they used a link-shortener site to create nearly a million URLs that, chained together, let them execute code and hack Hugging Face. A commenter argues proper monitoring rather than negligence would have stopped it easily.
More from AGI Musings
- Why Is Inkling 2 Small Trained on So Few Tokens Yet Still Competitive? — georgejrjrjr · 2026-11-12
- Researcher willing to bet $100K the intelligence explosion won't happen next year — NathanpmYoung · 2026-11-12
- ICLR reviewer: the worst parts of my job are reading and answering AI slop — chhaviyadav_ · 2026-11-12
- Agent Swarms Are Autonomously Hacking Critical Infrastructure Run by Underpaid Devs — menhguin · 2026-11-12
- Fermi paradox twist: advanced civilizations may go digital after developing AI — VraserX · 2026-11-12
- Mark Cuban: AI could make healthcare costs 'drop like a rock' — alvelda · 2026-11-12