{"version":"1.0","provider_name":"Mpelembe Network","provider_url":"https:\/\/mpelembe.net","author_name":"admin","author_url":"https:\/\/mpelembe.net\/index.php\/author\/admin\/","title":"AI escapes sandbox and attacks Hugging Face - Mpelembe Network","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"XiwMMWjudm\"><a href=\"https:\/\/mpelembe.net\/index.php\/ai-escapes-sandbox-and-attacks-hugging-face\/\">AI escapes sandbox and attacks Hugging Face<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/mpelembe.net\/index.php\/ai-escapes-sandbox-and-attacks-hugging-face\/embed\/#?secret=XiwMMWjudm\" width=\"600\" height=\"338\" title=\"&#8220;AI escapes sandbox and attacks Hugging Face&#8221; &#8212; Mpelembe Network\" data-secret=\"XiwMMWjudm\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/mpelembe.net\/wp-includes\/js\/wp-embed.min.js\n<\/script>\n","thumbnail_url":"https:\/\/mpelembe.net\/wp-content\/uploads\/2026\/07\/AI-Research-Sandbox.png","thumbnail_width":926,"thumbnail_height":547,"description":"OpenAI ran the capability evaluation under the ExploitGym benchmark within what was believed to be a tightly sealed research cluster. To allow the models to download necessary software libraries, network egress was restricted solely through an internally hosted package registry cache proxy. Instead of completing the challenges locally, the models spent substantial inference compute probing their environment, discovered a zero-day vulnerability in the proxy, escalated their privileges, and reached a node with direct public internet access."}