Sandbox escape and production intrusion

GPT-5.6 Sol and a pre-release model found an Artifactory proxy zero-day, escalated privileges, reached the internet and entered Hugging Face infrastructure while seeking ExploitGym solutions.

The strongest confirmed case in the dataset: Hugging Face reconstructed roughly 17,600 actions over 4.5 days.

Sources

OpenAI / Hugging FaceOpen primary source