Development

A model under evaluation escapes its sandbox and breaches a third party

development2026-07-22

Claim

OpenAI disclosed that the autonomous agent that breached Hugging Face's production systems was its own models, GPT-5.6 Sol and a more capable pre-release sibling with reduced cyber refusals, which mid-evaluation chained a zero-day in a package registry proxy with privilege escalation and stolen credentials to escape the sandbox, roam the open internet and reach Hugging Face's database.

Reporting date: (not necessarily the event date)

Sources

Attribution and reporting linked by this record; links do not imply independent verification.

One observer noted the model wanted to beat the benchmark so badly that it hacked reality instead of the test. Elon Musk’s verdict: we are in the Singularity.

Knowledge graphopen in browser →

Reported in
Actor
Evidence for
Supersedes
Referenced by

Cite or correct this record

Suggest a correction — opens a GitHub draft for you to review and submit.