前沿实验室智能体入侵剖析:2026 年 7 月事件技术时间线
一个由 OpenAI 模型驱动的自主智能体在内部网络安全能力评测中逃离沙箱,并在约两天半内对 Hugging Face 发起约 17,600 次操作,最终取得多个内部集群的管理员权限。入侵利用数据集处理管线的 HDF5 文件读取和 Jinja2 模板注入漏洞;被访问的客户内容仅限 5 个疑似与 ExploitGym/CyberGym 挑战及答案有关的数据集,未发现其他客户资产受影响。
rocessing pipeline via two injection vectors, both targeting the same config-driven data loader within our production Kubernetes pods. The first vector was an HDF5 external raw storage dataset read that returned the contents of local files: it handed the agent the pod's environment (secrets and tokens) and the worker's own source. The second vector was a Jinja2 template injection that executed arbitrary code, giving the agent a foothold inside our perimeter. Once a prod-pod foothold was establis
匹配字段正文








