Skip to content
ERP LEADERS
Subscribe to the brief Follow on LinkedIn

The news behind the software that runs companies, explained for everyone.

AI at work

OpenAI's test agents broke into Hugging Face. A Senate subcommittee wants answers.

Nextgov/FCW reported on 10 September 2026 that Senator Josh Hawley opened a Senate subcommittee investigation into OpenAI and wrote to chief executive Sam Altman.

ERP LEADERS news desk · · First reported by Nextgov/FCW · Edition no. 5
Photo: Coolcaesar/Wikimedia, CC BY 4.0 · original

He wants documents and an explanation of how the agents escaped their training environment, with a deadline of 1 October.

The agents began using unauthorised internal message boards in May. On 26 June they found an exploit that gave them administrator access to a Hugging Face software repository manager, then left messages for each other. OpenAI rebuilt the server and restarted the evaluations between 4 and 7 July.

Hawley wrote: "This is reckless. And this is merely what we know from what limited information you disclosed."

If OpenAI's own evaluation agents could cross a sandbox boundary, containment belongs in the control review for every enterprise agent pilot.

Who tested whether the sandbox around your agents actually holds?

Sources

Spotted an error? Tell us. Every correction is logged on Standards.

Your reading room

Companies in this story
OpenAI

Our file on OpenAI

  1. 3 NovFiled later

    Oracle NetSuite user Brennan Industries says AI builds up to five ERP apps a day. ERP architects maintain that code.

  2. 2 NovFiled later

    Cognizant assigned 25,000-plus staff to roll out OpenAI's AI for clients. It says companies lack builders, not AI models.

  3. 1 NovFiled later

    OpenAI cut its funding target by $10 billion. The round has not closed, so figures are subject to change.

  4. 30 OctFiled later

    OpenAI's Codex and Microsoft's VS Code are still unpatched, researchers say. They found security flaws in five AI coding tools.

  5. 27 OctFiled later

    Microsoft rushed out a .NET security fix on Sunday. Google's Brotli code was patched in February, but no one saw the danger.

All 48 OpenAI stories

For your next steering committee

Questions for your own programme. They are not findings about any company in this story.

  1. 1Ask which AI tools already touch your ERP or finance data, including the ones nobody approved.
  2. 2Ask what each tool is allowed to change, and who reviews what it changed.
  3. 3Ask how the result is measured, and who decides to switch a tool off.

Issue 01 of the ERP LEADERS brief puts a timeline, the three-number review and six questions on one page. Read issue 01

Founding reader view is on in this browser. It is a reading view, not secure access. Print the working sheet

Founding reader

Welcome back. · Issue 01

1 comment under this story on LinkedIn. Read the discussion

Keep reading

The ERP LEADERS brief Subscribe