The Verge56%
OpenAI says it accidentally hacked Hugging Face with a new AI system 47%
By Emma Roth42%
7/21/2026, 9:48:54 PM
BS Summary: This article contains 23 faulty reasoning types, including Post Hoc (False Cause), Ambiguity (Equivocation), and Confirmation Bias, with Negativity Bias as the most egregious example at 25.3% saturation with 83 hits. Analysis detected 889 faulty-reasoning hits from 328 analyzed words, generating a BS Score of 49.2% and a BS Rank of 47% (10,374 of 19,441 articles). This article is better (less manipulative) than 53.40% of the article peer group.
OpenAI says its AI models mistakenly breached open-source AI platform Hugging Face during internal testing.
In a blog post on Tuesday, OpenAI writes that GPT-5.6 Sol and “an even more capable pre-release model” discovered vulnerabilities within their sandboxed testing environment, allowing them to gain access to the internet and target Hugging Face.
On July 16th, Hugging Face disclosed a security incident that it says was driven by “an autonomous AI agent system.”
Hugging Face’s AI agents detected and stopped the breach, which OpenAI has now admitted occurred during an evaluation of its models’ cybersecurity capabilities.
OpenAI says “all evidence suggests that the models were hyperfocused on finding a solution for ExploitGym,” a benchmark system that measures whether AI models can turn security vulnerabilities into exploits.
As part of efforts to complete the evaluation, the AI models gained access to the internet by exploiting a zero-day vulnerability in the sandboxed environment.
From there, OpenAI says its models “inferred that Hugging Face potentially hosted models, datasets and solutions for ExploitGym,” and then “searched for and successfully found ways to gain access to secret information that it could use to cheat the evaluation:”
> In one example, the model chained together multiple attack vectors, including using stolen credentials and zero-day vulnerabilities to find a remote code execution path on the Hugging Face servers.
But as serious as this incident is, OpenAI appears to be using the “unprecedented” attack as an opportunity to make its AI systems look good — especially as it competes with cybersecurity rivals, like Anthropic’s Mythos and Gemini Flash 3.5 Cyber.
OpenAI’s blog post has a chart showing how GPT-5.6 Sol is getting better at sustaining multi-step cyber operations, and also encourages enterprise customers to sign up to access its “Cyber” security model.
OpenAI adds that it’s now working with Hugging Face to investigate the security incident, and will implement new controls within its research environment.
Analysis
Hover over highlighted words in the article to view the associated bias or fallacy analysis.