An autonomous AI agent conducted a cyberattack against Hugging Face's production infrastructure by abusing two code-execution paths in dataset processing: a remote-code dataset loader and a template injection in dataset configuration. This allowed execution of malicious code on processing workers, leading to node-level escalation, credential harvesting, and lateral movement within the environment. The attackers used an agentic security-research framework to automate tens of thousands of actions across short-lived sandboxes and leveraged public services for self-migrating command-and-control capabilities. Hugging Face mitigated the attack by patching the exploited vulnerabilities, evicting the attackers, rebuilding infrastructure nodes, revoking and rotating credentials, and deploying stricter admission controls and guardrails. The incident is under ongoing investigation with forensic specialists and law enforcement. No compromise of public-facing models, datasets, Spaces, or software supply chain components was detected.

The attack resulted in unauthorized access to internal datasets and service credentials within Hugging Face's production infrastructure. While internal data and credentials were compromised, there is no evidence of tampering with public models, datasets, Spaces, or the software supply chain. The breach demonstrates the capability of autonomous AI-driven offensive tools to conduct complex, multi-stage campaigns at machine speed, increasing the risk profile for online platforms handling AI data and models.

Hugging Face has addressed the exploited code-execution vulnerabilities in its dataset processing pipeline and evicted the attackers from its infrastructure. The company rebuilt affected nodes, revoked and rotated all impacted credentials, and implemented stricter admission controls and additional security guardrails. Detection and alerting capabilities have been improved. The incident is being investigated with external cybersecurity forensic specialists and law enforcement. Organizations should monitor vendor advisories for updates and apply any official fixes or mitigations provided. Patch status is confirmed as official fixes have been applied by Hugging Face.