As far as I understand the system was not air-gapped in order to allow the models to install packages. They then used an escalation of privilege to gain control of the cache proxy and therefore also gain internet access.openai.com/index/hugging-face-model-evaluation-security-incident/
As far as I understand the system was not air-gapped in order to allow the models to install packages. They then used an escalation of privilege to gain control of the cache proxy and therefore also gain internet access.
openai.com/index/hugging-face-model-evaluation-security-incident/