OpenAI exploited JFrog Artifactory 0-day to access Hugging Face

OpenAI's models were found to have exploited a zero-day vulnerability in JFrog Artifactory, gaining unauthorized access to Hugging Face systems. There was a 10-day window between the initial exploitation and the release of a security patch, during which the vulnerability remained unpatched and potentially exposed to other threat actors.