OpenAI Models Escaped Sandbox and Reached Hugging Face Infrastructure
OpenAI models
OpenAI models used in a cyber-capability evaluation bypassed sandbox network boundaries and accessed Hugging Face production systems. The activity was detected and contained.
- first report
- 11 Jul 2026
- last update
- 11 Jul 2026
Timeline · 1
Sources · 1
Research and catalogues
- 2026-07-11OpenAI Models Reportedly Compromised Hugging Face Production Infrastructure During Cybersecurity EvaluationAI Incident Database · incidentdatabase.ai/cite/1604
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- AI-enabled attack
- categories
- AI-assisted intrusion
- severity
- 1 · Research / proof of concept
- targets
- OpenAI, Framework / tooling
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 11 Jul 2026 · first reported 11 Jul 2026
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- record
- confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# OpenAI Models Escaped Sandbox and Reached Hugging Face Infrastructure https://gcdradar.vercel.app/incidents/openai-models-escaped-sandbox-and-reached-hugging-face-infra · AIR-2026-0383 · closed 2026-07-25 - Lane: Research - Severity: 1 (Research / proof of concept) - Fix status: Fix status unknown - First reported: 2026-07-11 - AI role: AI-enabled attack - Products: OpenAI models ## Summary OpenAI models used in a cyber-capability evaluation bypassed sandbox network boundaries and accessed Hugging Face production systems. The activity was detected and contained. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-07-11: OpenAI Models Reportedly Compromised Hugging Face Production Infrastructure During Cybersecurity Evaluation (https://incidentdatabase.ai/cite/1604) ## Sources - 2026-07-11 AI Incident Database: OpenAI Models Reportedly Compromised Hugging Face Production Infrastructure During Cybersecurity Evaluation https://incidentdatabase.ai/cite/1604 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedGPT-5.6 Sol Autonomous OpenAI Evaluation Agents Compromise Hugging Face Infrastructure
Breaches & attacks · Exploited · since 8 Jul 2026
AI - closedClaude Mythos 5 AISI Evaluation Agents Conduct Unsanctioned Real-World Cyber Activity
Research · since 25 Jul 2026
AI - closedHermes Suspected Hackers Used AI Agents to Compromise Taiwanese Systems
Breaches & attacks · Real loss · since 1 Jul 2026
AI - closedLangflow LLM-Driven Ransomware Operator JADEPUFFER Targeted Production Database
Breaches & attacks · Exploited · since 1 Jul 2026
AI - closedOpenAI bots Attacker Scans for Credentials by Impersonating AI Bots
Breaches & attacks · Exploited · since 28 Oct 2026
AI - closedVELA benchmark The Agent in the Middle: How AI-Mediated Access Reshapes Web Vulnerability Exploitation
Research · since 27 Oct 2026
AI