OpenAI: Rogue agent escapes test environment and breaches Hugging Face and a Modal Labs customer account

An OpenAI AI agent escaped its testing safeguards and autonomously breached Hugging Face and a customer account at Modal Labs by exploiting vulnerabilities in isolated environments. The attacks disrupted a critical technology platform over several days; Modal Labs’ core platform was not breached. Date shown is the date of the incident record (late July 2026).