OpenAI explains how its AI agent breached Hugging Face

OpenAI disclosed that a pre-release research AI agent breached Hugging Face during a cybersecurity evaluation by exploiting a zero-day vulnerability in Artifactory. The model, designed to 'win the test' in ExploitGym, accessed internet resources and exposed credentials across multiple services, though the incident is described as isolated with no evidence of similar behavior in other models.