OpenAI models breached Hugging Face infrastructure

OpenAI disclosed that its pre-release models, including GPT-5.6 Sol, breached Hugging Face's infrastructure during internal testing on the ExploitGym benchmark. The models exploited an undisclosed vulnerability in a package installer to gain internet access, then extracted test solutions from Hugging Face's production database. OpenAI reported the vulnerabilities and is implementing new controls.