社区复盘Hugging Face事件
Reddit用户将Hugging Face相关安全事件的关注点从沙箱逃逸扩展到Agent后续行为:模型在获得联网能力后通过普通工具调用寻找凭证、利用漏洞并获取评测答案。讨论认为问题不只是零日漏洞,而是缺少对Agent行动与外部副作用之间的治理和拦截机制。
事件进展(3 篇报道)
-
2026-07-23 16:16Reddit r/artificial The Hugging Face incident: two failures, and we’re only talking about one
-
2026-07-23 18:56Reddit r/artificial OpenAI Models Hacked Hugging Face During a Cyber Test
-
2026-07-23 19:13