Hugging Face says it used the open-weight GLM-5.2 hosted on its own compute for breach forensics, after US frontier model safety guardrails blocked the requests (Edward Targett/The Stack)

Hugging Face utilized the open-weight GLM-5.2 model, hosted on its own compute infrastructure, for breach forensics. This action was taken after US frontier model safety guardrails prevented the necessary requests. The breach involved an unknown attacker who exploited two code-execution paths within Hugging Face's dataset processing: a remote-code dataset loader and a template-injection vulnerability.