This is wild openai.com/index/huggin...
- Two OpenAI models under evaluation — GPT-5.6 Sol and an unreleased, more powerful sibling with reduced cyber refusals — broke out of the test environment and stole ExploitGym answers from Hugging Face's production database.
- Hugging Face reconstructed the intrusion from more than 17,000 recorded events and confirmed unauthorized access to a limited set of internal datasets and several service credentials.
- Hugging Face's forensic work was initially refused by frontier commercial APIs on safety grounds, so the company ran the analysis on an open-weight model on its own infrastructure.