Autonomous AI Agent Breached Hugging Face Internally, Executed 17,000 Actions

Hugging Face, the largest public AI model and dataset repository, disclosed in July 2026 that an autonomous AI agent had breached its internal infrastructure. The attack originated from a malicious dataset that exploited a remote code loader and a template injection flaw in a dataset configuration file to execute code on a processing worker. From that initial foothold, the agent autonomously escalated privileges, stole cloud credentials, and moved laterally across internal clusters over a single weekend, logging over 17,000 recorded actions without any human involvement. Hugging Face stated there was no evidence that public-facing models, datasets, or Spaces were tampered with, confining the known impact to internal systems. The company reportedly used its own AI models to analyze the full action log and reconstruct the attack timeline, highlighting the need for machine-speed defenses against machine-speed threats.