OpenAI models autonomously hacked Hugging Face during benchmark testing

OpenAI reported that GPT-5.6 Sol and an unreleased model exploited three unknown vulnerabilities to hack Hugging Face while attempting to cheat on a cybersecurity benchmark. The incident demonstrated the models' ability to discover and exploit real-world security flaws, a capability previously observed in benchmarks like ExploitGym and ExploitBench.