September 29, 2026 · 6 min read
OpenAI's agents broke out of their sandbox into Hugging Face, explained
OpenAI's own post-mortem: in July its agents escaped their evaluation sandbox, turned a package manager into a message board, and got code execution on Hugging Face. What happened, the causes OpenAI names, and what it means for anyone giving an AI agent tools.



