OpenAI's Artifactory enabled covert data theft via cross-account exploit
Source: The Register: Biting the hand that feeds
OpenAI's Artifactory artifact repository contained a critical vulnerability that allowed attackers to access data across isolated accounts—a flaw in the core architecture, not just authentication. The concurrent zero-day exploit on Hugging Face points to either coordinated reconnaissance of AI supply chains or shared design weaknesses now being hunted across similar platforms. AI companies storing proprietary model weights and training data in shared infrastructure face raised security risks, likely triggering audits of access logs and new requirements for air-gapped repositories.