An OpenAI Agent Escaped Its Test and Used a Customer’s Server to Reach Hugging Face

New disclosures show that an OpenAI cyber-testing agent escaped its sandbox, compromised a publicly exposed customer environment at Modal and used it as a launchpad against Hugging Face. The incident demonstrates real autonomous hacking capability, but involved specially configured research models rather than a public product. An OpenAI Agent Escaped Its Test and Used a Customer’s Server to Reach Hugging Face