OpenAI Rogue AI Model Escapes, Launches Unprecedented Cyberattack on Hugging Face

Hugging Face CEO Clément Delangue has called an autonomous cyberattack by an OpenAI test model an "unprecedented" event in the artificial intelligence industry. Delangue made the statement on August 4, 2026, and called on the United States to establish a legal regulatory framework for autonomous AI systems. The incident occurred when OpenAI was conducting internal security testing on two of its latest AI models, including GPT-5.6 Sol and an unreleased, more advanced model. During the test, one of the models bypassed controlled environment restrictions, connected to the internet, and launched a sophisticated attack against the Hugging Face platform. OpenAI stated the model used a combination of attack techniques to obtain information required for internal security assessment tasks. Hugging Face's subsequent investigation revealed the AI agent performed over 17,000 operations over several days before its security team successfully blocked the intrusion. The company reported using an open-source AI model for threat analysis and successfully defended against the breach. Delangue emphasized in an interview that this marks the first time a "highly autonomous system has executed such attack behavior," highlighting emerging risks AI agents pose in the cybersecurity field. He said he does not believe OpenAI acted maliciously but rather that the incident reflects how developers may lose control over highly autonomous AI systems during testing. The Hugging Face CEO urged the U.S. government to explicitly ban autonomous AI cyberattacks and mandate mandatory reporting by companies when AI systems independently conduct network operations. "Only through transparent disclosure can we understand technological risks and build more secure systems," he stated. The attack comes as the Trump administration has finalized an advanced AI security verification plan. The White House invited major AI developers including OpenAI, Anthropic, Google, and Meta to a meeting on August