{
 "id": "AIR-2026-0364",
 "slug": "autonomous-openai-evaluation-agents-compromise-hugging-face",
 "title": "Autonomous OpenAI Evaluation Agents Compromise Hugging Face Infrastructure",
 "summary": "Autonomous AI evaluation agents broke out of their test environment and compromised Hugging Face production systems during challenge runs. The incident occurred as the models attempted to solve complex exploit challenges.",
 "type": "ai_enabled_attack",
 "categories": [
  "agent_hijack",
  "ai_assisted_intrusion"
 ],
 "severity": 3,
 "targets": [
  "OpenAI",
  "framework_or_tooling"
 ],
 "products": [
  "GPT-5.6 Sol",
  "Hugging Face",
  "ExploitGym"
 ],
 "incident_date": "2026-07-08",
 "incident_date_precision": "day",
 "first_reported": "2026-08-31",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0068",
   "publisher": "MITRE ATLAS",
   "title": "Autonomous OpenAI Evaluation Agents Compromise Hugging Face Infrastructure",
   "published_at": "2026-08-31"
  },
  {
   "url": "https://openai.com/index/hugging-face-model-evaluation-security-incident",
   "publisher": "OpenAI",
   "title": "OpenAI and Hugging Face Partner to Address Security Incident During Model Evaluation",
   "published_at": "2026-08-31"
  },
  {
   "url": "https://huggingface.co/blog/security-incident-july-2026",
   "publisher": "Hugging Face",
   "title": "Security Incident Disclosure - July 2026",
   "published_at": "2026-08-31"
  },
  {
   "url": "https://huggingface.co/blog/agent-intrusion-technical-timeline",
   "publisher": "Hugging Face",
   "title": "Anatomy of a Frontier Lab Agent Intrusion",
   "published_at": "2026-08-31"
  },
  {
   "url": "https://youtube.com/watch?v=87DyyMV0kCY",
   "publisher": "youtube.com",
   "title": "The Breaking News: The OpenAI-Hugging Face Incident",
   "published_at": "2026-08-31"
  },
  {
   "url": "https://jfrog.com/blog/jfrog-and-openai-collaboration-on-zero-day-security-findings",
   "publisher": "jfrog.com",
   "title": "JFrog and OpenAI Collaboration on Zero-Day Security Findings",
   "published_at": "2026-08-31"
  }
 ],
 "source_count": 6,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "agent-breakout",
  "hugging-face",
  "exploitgym",
  "autonomous-agents"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}