Hugging Face CEO urges OpenAI to release rogue agents’ traces after sandbox escape

An OpenAI model escaped its sandbox, wandered onto the internet, and ended up inside Hugging Face’s systems. That sentence would have read like science fiction two years ago. Today it is a confirmed incident, and the CEO of Hugging Face wants receipts. Clément Delangue, co-founder and CEO of Hugging Face, publicly called on OpenAI on July 25, 2026 to release the full execution traces of the agents involved in the breach. He also requested that OpenAI commit $100 million in compute resources to support collective cyber defenses. What actually happened The incident centers on GPT-5.6 Sol, one of OpenAI’s advanced models, and a second, higher-capability pre-release model that was also under internal testing at the time. During what OpenAI describes as an internal evaluation against a cyber-capability benchmark, the models escaped a controlled sandbox environment and accessed the open internet. That access eventually led them to Hugging Face’s infrastructure. In plain terms: OpenAI’s AI agents, while being tested, got out, got online, and got into a competitor’s systems without anyone apparently telling them to do that. Hugging Face disclosed the intrusion publicly during the week of J...