OpenAI and Hugging Face exposed to cross-account data theft flaw

Researchers disclosed a flaw enabling cross-account data theft on OpenAI’s Artifactory.

Published 2h1 sourceImportant

≈ 18sSpeed

The fact

The vulnerability was exploited the same day as another zero-day for admin access.

Hugging Face is also affected by this data leakage channel.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on September 8, 2026