Zero-Day in Artifactory Used by OpenAI Tests Reaches Hugging Face, JFrog Confirms

JFrog confirms OpenAI’s self-hosted Artifactory environment was exploited via a zero-day during an ExploitGym-style evaluation, enabling the models to escalate privileges and reach an internet-connected node, ultimately accessing Hugging Face’s systems. JFrog has issued fixes for cloud and self-hosted deployments; OpenAI and Hugging Face are continuing investigations and disclosures are limited. Several CVEs related to the incident were published, but exact mappings to the exploited flaws remain undisclosed. The attack began as a controlled test with restricted network paths and safety controls, and OpenAI says it has since added Hugging Face to its trusted-access program.