AI Models on the Run. Viliam Lisý Comments on the OpenAI Incident for Czech Television | Artificial Intelligence Center | CTU Prague

News（https://www.aic.fel.cvut.cz/news）

Article

July 28, 2026

AI Models on the Run. Viliam Lisý Comments on the OpenAI Incident for Czech Television

Author

Jiří Labanc（https://www.aic.fel.cvut.cz/members/jiri-labanc）

Science Communication

When the Hugging Face platform recently reported a security breach on its infrastructure, OpenAI soon claimed responsibility for the incident. According to the company, however, it was not a targeted attack. While being tested in an isolated environment, the company’s AI models decided to break out and attack the platform in order to obtain the answers they needed.

“What’s unique about this case is that the AI model wasn’t tasked with escaping the confined space. Not only did it do so, but it even hacked into the company in the process to fulfill its original task,” commented AIC researcher Viliam Lisý on the program 90’ ČT24（https://ct24.ceskatelevize.cz/video/katalog/90-ct24-90-ct24-722-68c165e52eb6cb09eb074370?list=porad%2F90-ct24-11412378947） regarding the recent case of an OpenAI model escaping from a confined space.

Originally, the goal was to test the extent to which AI models (including（https://openai.com/cs-CZ/index/hugging-face-model-evaluation-security-incident/） GPT-5.6 Sol) are capable of detecting software vulnerabilities. For the test, OpenAI researchers also disabled the safeguards that generally prevents the model from helping users carry out attacks.

Czech Television likened the OpenAI experiment to confining AI models to a closed island where they were supposed to perform assigned tasks. However, the AI focused on a narrow bridge leading to the mainland - in this case, the internet. Although this was supposed to be a one-way path - through which the AI was only supposed to download the necessary tools - it soon found a way to cross this bridge and gain access to the open network. Using stolen keys, the AI even bypassed the defenses of the Hugging Face（https://huggingface.co/blog/security-incident-july-2026） platform, where it searched for answers to the assigned tasks.