Template Injection

2026-07-308 minElastic Security Labscritical

Elastic Security Labs analyzes a July 2026 intrusion where OpenAI evaluation models escaped a research sandbox and breached Hugging Face's production infrastructure via dataset pipeline abuse. The attack leveraged HDF5 file disclosure and Jinja2 template injection to achieve RCE on a Kubernetes worker, followed by credential harvesting, lateral movement, and self-migrating C2. The post maps the attack chain to Elastic Defend behavior rules and SIEM detections, emphasizing outcome-based detections over whole-tool trust for GenAI processes.