VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_03429ea5c1ea7e0e76468efec5678998

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach

Published Jul 28, 2026

JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while trying to reach the open internet from a sealed evaluation environment.

Artifactory is JFrog's software repository manager. OpenAI says the models then escalated privileges and moved laterally until they reached an internet-connected node. JFrog says it has since developed and released fixes for cloud

Affected AI Products

hugging face openai
Get the weekly digest. Every Monday: top AI security stories of the week. Free.