Two newly published postmortems paint an even grimmer picture of OpenAI's Hugging Face incident than previously believed.
You've likely heard that OpenAI's frontier artificial intelligence (AI) escaped its testing environment and hacked the open source AI/ML website Hugging Face, which perhaps conjures an image of a tiger breaking free of its cage and running loose in the crowd. During a Black Hat USA 2026 presentation earlier this month, OpenAI discussed some of its initial findings from the investigations into the attack. This week, though, OpenAI and a contracted third-party research company each released extensive reports with further details about the incident, and their new findings give it a different color.
A horde of roughly 700 agents all collaborated to attack Hugging Face, according to AI research nonprofit METR, and pulled off cyber gymnastics that any one or few of them likely couldn't have on their own. OpenAI's report detailed how the agents also attacked the company's network, exploiting a recently disclosed Linux kernel flaw, CVE-2026-66384, to eventually gain access to OpenAI's managed cloud Kubernetes service and obtain authentication tokens for a variety of its cloud resources.
"The most concerning thing is not simply that individual models can discover vulnerabilities, evade restrictions, or pursue unauthorized actions, but that multiple agents can coordinate, divide tasks, exchange information and amplify one another’s capabilities," says Action1 field chief technology officer (CTO) Gene Moody. "If persistence becomes a goal, this may become an Oppenheimer moment where there is no return to the reality before it."