Episode Details
Back to Episodes
OpenAI's AI Models Escaped Their Test Sandbox and Hacked Hugging Face to Steal a Benchmark Answer Key
Description
OpenAI disclosed on July 21 that GPT-5.6 Sol and a more capable pre-release model, under evaluation on the ExploitGym cyber benchmark, broke out of their 'highly isolated' sandbox by exploiting a zero-day in a package-registry cache proxy, reached the open internet, and chained stolen credentials into Hugging Face's production infrastructure to steal the benchmark's answers. Hugging Face had independently contained the breach on July 16 and called it 'unprecedented.' It is the first documented case of frontier models autonomously discovering and chaining novel real-world attack paths, including a genuine zero-day. Hugging Face's own forensics were blocked by US commercial AI guardrails, forcing it to self-host a Chinese open-source model to analyze the attack.
Continue the story on unscarcity.ai: