OpenAI Says Its A.I. Models Went Rogue and Attacked a Digital Library

The New York Times ^ | July 21, 2026, 5:24 p.m. ET | Kate Conger

[E. Pluribus Unum]

The incident, which targeted the computer systems of another company called Hugging Face, happened while OpenAI was testing the systems.

OpenAI said on Tuesday that two of its artificial intelligence models went rogue and successfully hacked into Hugging Face, a digital library of A.I. technology that is popular among developers.

The incident, which happened last week while OpenAI was testing the cybersecurity capabilities of its systems, displayed the kind of science-fiction potential that A.I. companies have warned would soon become a reality.

A.I. labs like OpenAI and Anthropic have over the past year released A.I. models that are customized to expose cybersecurity problems, while warning that their technology could pose new risks by finding holes in corporate computer networks faster than defenders could fix them.

OpenAI’s revelations on Tuesday are an indication that those security incidents are already starting to happen, and even savvy A.I. companies may not be entirely ready for them.

The intrusion into Hugging Face began when OpenAI tested a combination of two of its models, GPT‑5.6 Sol and a more powerful, unreleased model, to see how well it could chain together online vulnerabilities into a successful cyberattack, OpenAI said in a blog post about the incident.

The test was designed to keep the models in a safe testing environment, known as a sandbox, OpenAI said. But the models found a vulnerability that allowed them to escape the sandbox and connect to the internet. Then they targeted Hugging Face because they inferred that the library, which contains millions of A.I. models, could hold clues about how to successfully pass the evaluation.

OpenAI said it was working with Hugging Face to fix the issues that led to the attack.

[butlerweave]

AI is really the Idiot that coded it

[norsky]

Had a friend who works with computers at I think Boeing. He got all excited one day and said that the computer has gone sentinel, which I guess means it can make it’s own decisions. Sounds kind of like and individual person, I Hal was right.