openai-huggingface-incident-research

> “The Hugging Face incident definitively showed that it wasn’t the fact that the agents were super smart. It’s that there literally was a hole that was exploited because it was not configured correctly on the containment side.” I would encourage reading the actual report, which is explicit that a previously unknown exploit was used to escape the sandbox: “Agents exploited a separate, previously unknown vulnerability in Artifactory to move beyond their sandbox environment and compromise the Hugging Face environment.” — Section IV.A, p. 9 in github.com/zeke/openai-huggingface-incident-resea…