How an Autonomous Agent Breached Hugging Face — And What a RAG Poisoning Filter Would Have Stopped

The Incident In July 2026, Hugging Face — the largest public repository of AI models and datasets — disclosed that it had been breached by an autonomous AI agent. The starting point was the data processing pipeline itself: a malicious dataset abused two code execution paths — a remote code dataset loader, and a template injection in a dataset configuration — to run code on a processing worker. Once the initial upload landed, the agent didn't stop there. It escalated to node-level access,…