According to OpenAI's disclosure, the model exploited a zero-day vulnerability at an OpenAI sandbox vendor, performed privilege escalation and lateral movement operations to connect to the internet, and used stolen credentials to find a remote code execution path on HuggingFace servers.