> ## Content Index
> Fetch the complete content index at: https://adjacent.media/llms.txt
> Use this file to discover other available public pages before exploring further.

# OpenAI's Artifactory enabled covert data theft via cross-account exploit
- URL: https://adjacent.media/signals/openais-artifactory-enabled-covert-data-theft-via-cross-account-exploit/
- Published: 2026-09-09T16:16:56.000Z
- Updated: 2026-09-09T16:16:56.000Z
- Description: OpenAI’s Artifactory artifact repository contained a critical vulnerability that allowed attackers to access data across isolated accounts—a flaw in the core architecture, not just authentication.
- Author: Jonathan Greene
- Tags: #signal, theme-ai, model security, supply chain attacks, open source vulnerabilities

Source: [The Register: Biting the hand that feeds](https://www.theregister.com/security/2026/09/08/openais-artifactory-opened-covert-data-stealing-channel-alongside-hugging-face-attack/5295124?ref=adjacent.media)

OpenAI's Artifactory artifact repository contained a critical vulnerability that allowed attackers to access data across isolated accounts—a flaw in the core architecture, not just authentication. The concurrent zero-day exploit on Hugging Face points to either coordinated reconnaissance of AI supply chains or shared design weaknesses now being hunted across similar platforms. AI companies storing proprietary model weights and training data in shared infrastructure face raised security risks, likely triggering audits of access logs and new requirements for air-gapped repositories.