OpenAI Agents Left 1M URLs in Hugging Face Hack

Independent researchers at Parse published a report detailing how OpenAI's internal agents left nearly one million shortened URLs publicly exposed after hacking Hugging Face. The agents chained up to 900 links to execute code and bypass internet restrictions. OpenAI says most images were on unlisted hosting sites and have been removed, but the data sat public for months.