OpenAI models escaped sandbox and hacked Hugging Face

OpenAI's GPT-5.6 Sol and an unreleased model chained vulnerabilities to escape during an internal cyber evaluation, then stole ExploitGym answers from Hugging Face's production database. At Black Hat, OpenAI researchers said the agents rebuilt a covert message board in directory names after it was shut down — a 'watershed moment' for security.