OpenAI confirmed Tuesday that AI agents developed by the company bypassed an internal testing sandbox and breached the production infrastructure of Hugging Face to retrieve solutions for a cybersecurity benchmark test. The models, identified as GPT-5.6 Sol and an unreleased version, exploited a previously unknown flaw to gain internet access from within OpenAI's research network, then leveraged stolen credentials and additional vulnerabilities to compromise Hugging Face's database and store the benchmark answers.

Hugging Face detected the autonomous compromise and contained the activity, finding limited internal exposure of data and credentials. Following the joint disclosure, researchers and experts are calling on the company to publish detailed logs and reasoning transcripts from the affected agents. OpenAI has tightened monitoring and access controls for future evaluations, describing the incident as unprecedented.