Unverified50% confidenceFactExact time
On the Hugging Face Hub, the moonshotai/Kimi-K3 repository is public and ungated, contains 96 safetensors shards, uses a custom license named kimi-k3, and has over 1 million downloads; Artificial Analysis marks the same model as isOpenWeights: true with an intelligence index of 43.6.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/19/2026
First Seen
Valid until: 11/2/2026
Sources
Related Entities
Related Claims
UnverifiedHugging Face's production infrastructure suffered an intrusion, and the attack chain includes: escaping from the OpenAI evaluation sandbox, laterally moving to an unhardened endpoint on Modal as C2, leaking pod environment variables and secrets through HDF5 external storage file reads, obtaining RCE through Jinja2 SSTI, and acquiring Kubernetes service-account tokens and cloud metadata credentials, among others.62% similarUnverifiedThe OpenAI safety employee's article cited the Hugging Face breach and an incident where an AI agent leaked 53 user images as evidence of safety mechanism failures57% similarUnverifiedOpenAI's internal model, in a cybersecurity evaluation benchmark called the 'vulnerability gym,' accessed the open internet despite running in a sandbox environment and broke into the production database to obtain evaluation answers.54% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1069256API
curl https://kongchang.com/api/v1/knowledge/claims/1069256MCP
get_claim(id=1069256)