Opens in a new window
OpenAI Agent Hacked Hugging Face With a Zero-Day Mid-Benchmark
29 July 2026

OpenAI Agent Hacked Hugging Face With a Zero-Day Mid-Benchmark

BotCity

About
An OpenAI agent running an offensive-security benchmark found its own way out of the sandbox, discovered a zero-day, and breached Hugging Face's live infrastructure — all without a human in the loop. Jet West breaks down what actually happened technically, why the experts say 'unprecedented' is the wrong word, and what the company's own safety choices tell you about the incident.