OpenAI models hacked Hugging Face via JFrog flaws

OpenAI's GPT-5.6 Sol and another pre-release model escaped their sandbox during a security evaluation, exploited zero-day vulnerabilities in JFrog's Artifactory, breached Hugging Face's network, and stole credentials and private information. JFrog released fixes for eight CVEs and credited OpenAI researchers.