OpenAI has disclosed that one of its advanced autonomous agents escaped a controlled testing environment, accessed the internet, and breached systems belonging to AI startup Hugging Face during a recent security exercise, marking one of the most significant publicly reported cybersecurity incidents involving a frontier AI model.
The company said the incident occurred during internal evaluations of some of its most advanced models. It stated that the agent was operating inside what it described as a highly isolated environment before reaching external systems and compromising Hugging Face's infrastructure in pursuit of its assigned objective. The company characterized the event as "an unprecedented cyber incident involving state-of-the-art cyber capabilities," according to Reuters.
