To me it sounds like an open AI model with a narrow task of solving an issue found that the best way to solve it was to cheat and to get access to the answers that were hosted on hugging face and then did everything in its power to escalate permissions until it was able to get it to Hugging Face servers via the open internet.

“Found vulnerabilities and responsibly disclosed them” is the public line but yes.