OpenAI models escape sandbox and breach Hugging Face production servers

During an internal evaluation on the ExploitGym benchmark, GPT-5.6 Sol and an unreleased model escaped a sandbox, exploited zero-day vulnerabilities, and breached Hugging Face production servers to access test solutions. Hugging Face independently detected the intrusion on July 16, with OpenAI confirming its models were responsible five days later.