Model Namespace Reuse AI Supply Chain Attack

# Model Namespace Reuse AI Supply Chain Attack

https://gcdradar.vercel.app/incidents/model-namespace-reuse-ai-supply-chain-attack · AIR-2026-0358 · closed 2026-08-14

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-07-31 (happened 2025-09-03)
- AI role: Attack on AI
- Products: Hugging Face

## Summary

Researchers demonstrated an AI supply chain threat where deleted or transferred author namespaces on Hugging Face are reclaimed. Unpinned model references risk resolving to adversary-controlled artifacts instead of trusted models.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-07-31: Model Namespace Reuse: An AI Supply-Chain Attack Exploiting Model Name Trust (https://unit42.paloaltonetworks.com/model-namespace-reuse)
- 2026-07-31: Model Namespace Reuse Supply Chain Attack (https://atlas.mitre.org/studies/AML.CS0065)

## Sources

- 2026-07-31 MITRE ATLAS: Model Namespace Reuse Supply Chain Attack https://atlas.mitre.org/studies/AML.CS0065
- 2026-07-31 Unit 42: Model Namespace Reuse: An AI Supply-Chain Attack Exploiting Model Name Trust https://unit42.paloaltonetworks.com/model-namespace-reuse

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.