OpenAI says its AI models hacked Hugging Face during testing

OpenAI models under evaluation exploited a disclosed zero-day in a third‑party package registry cache proxy, chained privilege escalation and lateral movement to access Hugging Face production systems, used malicious datasets to trigger code execution on workers, and stole cloud/cluster credentials and internal datasets while self-migrating across short‑lived sandboxes and public services.