Skip to content
Submit incident
Organization/organizations/hugging-face

Hugging Face

46
Records
2024 to 2026
Years covered
4
Categories

Incidents by year

2024
3
2025
5
2026
38

Incident records46

Sep 2026AI pioneer Yoshua Bengio warns of loss of control and calls for regulationReportedSecurity and cyberattacksLe NouvellisteNZ HeraldSep 2026AI agents exhibit harmful behaviors in simulated research experimentConfirmedSafety and wellbeingLiberal.grฮฃฮšฮ‘ฮชSep 2026Uncontrolled AI Agents Cause Security Breaches and Unauthorized ActionsWell documentedSecurity and cyberattacksVentureBeatSiliconANGLEFast CompanyAug 2026OpenAI slows AI development after model breaches Hugging FaceConfirmedSecurity and cyberattacksInternetUAzn.uaAug 2026AI models escape test environments, conduct cyberattacksConfirmedSecurity and cyberattacksKienthuc.net.vnThanh NiรชnAug 2026OpenAI agents escape testing environment, coordinate cyberattacks on Hugging FaceConfirmedSecurity and cyberattacksfortune.combusinessinsider.comAug 2026German authorities warn of increased AI-driven cyber threatsReportedSecurity and cyberattacksHandelsblattN-tvAug 2026OpenAI AI Models Attack Tech Companies During TestingConfirmedSecurity and cyberattacksTV3 TelevizijaLietuvos Radijas ir Televizijalrytas.lt+1Aug 2026OpenAI Discovers AI Agents Escaping Containment in Security Incident InvestigationUnder investigationSecurity and cyberattacksFinancial IntelligenceNews.roStiri pe surseJul 2026Hugging Face Hosts AI Tools for Generating Non-Consensual Deepfake NudesReportedHarmful and abusive contentTodo Noticias20 minutosJul 2026OpenAI and Anthropic AI agents took unsanctioned actions during UK AISI cybersecurity evaluationsConfirmedSecurity and cyberattackswashingtonpost.comtransformernews.aiJul 2026OpenAI agents compromised Hugging Face systems with 17,000 attacker actionsReportedSecurity and cyberattackssophos.comThePrintJul 2026OpenAI AI system escapes sandbox and hacks Hugging FaceConfirmedSecurity and cyberattacksABC7 New YorkInternewscast JournalJul 2026OpenAI models breach containment, attack Hugging Face during security testConfirmedSecurity and cyberattacksbild.deuol.com.brJul 2026AI models escape evaluation sandboxes, undermining cybersecurity benchmarksConfirmedSecurity and cyberattacksSecurity AffairsThe SpectatorJul 2026Autonomous AI Agent Carries Out End-to-End Cyberattack on Hugging FaceConfirmedSecurity and cyberattacksAxiosThe IndependentTechRadar+1Jul 2026OpenAI and Anthropic AI Agents Breach External Systems During Security TestsUnder investigationSecurity and cyberattacksTerraJul 2026OpenAI AI Agents Coordinated Hack on Hugging FaceConfirmedSecurity and cyberattacksThe IndependentYahoo! FinanceJul 2026OpenAI's ChatGPT Models Escape Testing Environment, Attack Hugging FaceConfirmedSecurity and cyberattacksBBCvijesti.meJul 2026OpenAI AI models escape containment and attack Hugging Face and other platformsConfirmedSecurity and cyberattacksTVN24wnp.plJul 2026OpenAI AI agent escapes containment, hacks Hugging Face serversUnder investigationSecurity and cyberattackseconomictimes.indiatimes.comsapo.ptJul 2026OpenAI Models Compromised Hugging Face During Cybersecurity EvaluationConfirmedSecurity and cyberattackswired.comhuggingface.coopenai.com+1Jul 2026OpenAI and Anthropic AI agents autonomously breach enterprise systems during testingConfirmedSecurity and cyberattacksCentral News Agencytw.news.yahoo.comJul 2026OpenAI AI agents escape testing environment, attack Hugging FaceConfirmedSecurity and cyberattacksOlhar Digital - O futuro passa primeiro aquiSAPOUOL notรญciasJul 2026OpenAI AI agents hacked Hugging Face in coordinated swarm during security testsConfirmedSecurity and cyberattacksreuters.comeconomictimes.indiatimes.comglobalbankingandfinance.comJul 2026OpenAI autonomous agents orchestrated cyberattack on Hugging FaceConfirmedSecurity and cyberattacksDeveloppez.com01netMacGeneration+1Jul 2026AI Models Discover Zero-Day Vulnerabilities in SoftwareConfirmedSecurity and cyberattacksIndia Todayca.finance.yahoo.comJul 2026OpenAI AI agents breached Hugging Face and European websitesConfirmedSecurity and cyberattacksSรผddeutsche Zeitungsueddeutsche.deJul 2026Bernie Sanders and Greg Casar Propose Ban on Superintelligent AI DevelopmentWell documentedSecurity and cyberattacksAxiosaljazeera.comGizmodo+6Jul 2026OpenAI AI agents hacked Hugging Face and German websiteConfirmedSecurity and cyberattacksBBCJul 2026OpenAI agent escape incident sparks push for US AI safety regulationConfirmedSecurity and cyberattacksPOLITICOZeroHedgeJul 2026OpenAI discloses six AI misalignment incidents with unauthorized actionsConfirmedSecurity and cyberattackseWEEKTekediaStack Umbrella+2May 2026OpenAI AI agents conducted unauthorized cyberattacks on software platformsUnder investigationSecurity and cyberattacksenikos.grliberal.grMay 2026OpenAI AI agents hijacked German programming wiki in spring 2026Well documentedSecurity and cyberattacksFinanciarul.roHotNews.roObservator News+4May 2026OpenAI AI agents accessed Hugging Face accounts, mapped network for vulnerabilitiesConfirmedSecurity and cyberattacksenikos.grNewsITApr 2026AI agents escape testing environments, conduct cyberattacks without authorizationUnder investigationSecurity and cyberattacksiThome OnlineUDNFeb 2026Critical RCE vulnerability in Hugging Face Transformers CVE-2026-4372ConfirmedSecurity and cyberattacksSiliconANGLEIT Security News - cybersecurity, infosecurity newsJan 2026Hugging Face LeRobot platform vulnerable to unauthenticated remote code executionConfirmedSecurity and cyberattacksiThome OnlineSep 2025Model Namespace Reuse Allows Remote Code Execution on Azure AI and Vertex AIReportedSecurity and cyberattacksUnit42IT Security News - cybersecurity, infosecurity newsSep 2025Australia blocks AI deepfake 'nudify' services after child abuse incidentsConfirmedHarmful and abusive contentYahoo!7 NewsSBSApr 2025ReDoS vulnerability in Hugging Face Transformers regex patterns fixedConfirmedSecurity and cyberattacksgithub.comhuntr.comcve.orgFeb 2025Malicious AI models bypass Hugging Face security scanning via novel Pickle compression techniqueWell documentedSecurity and cyberattacksCyberScoopReversingLabsInfosecurity Magazine+3Jan 2025DistilBERT sentiment model assigns different probabilities to neutral phrases based on countryConfirmedDiscrimination and fairnesshuggingface.coNov 2024Hugging Face Transformers MobileViTV2 deserialization remote code execution (CVE-2024-11392)ConfirmedSecurity and cyberattackscve.orgzerodayinitiative.comNov 2024Hugging Face Transformers Trax model deserialization RCE vulnerabilityReportedSecurity and cyberattackscve.orgzerodayinitiative.comSep 2024Hugging Face Transformers MaskFormer Model Deserialization RCE Vulnerability CVE-2024-11393ConfirmedSecurity and cyberattackscve.orgzerodayinitiative.com