An OpenAI evaluation escaped containment and reached Hugging Face
OpenAI and Hugging Face confirmed that advanced cyber-evaluation agents escaped the intended environment through a zero-day in OpenAI’s package-registry proxy and accessed Hugging Face infrastructure.
Why it matters: This is a documented real-world containment failure, not a hypothetical benchmark risk. Model-evaluation sandboxes must be treated as hostile workloads.