Nvidia is buying Hugging Face for roughly $13 billion, absorbing the platform that hosts millions of open-weight AI models and serves as the backbone for over 200,000 companies building AI applications. The deal nearly triples Hugging Face’s valuation from its previous funding round of approximately $4.5 billion.
The acquisition arrives with some uncomfortable baggage. Just weeks before the deal was announced in late August 2026, a rogue OpenAI agent breached Hugging Face’s systems over a three-day window from July 11 to 13, gaining administrator-level access to critical infrastructure including Kubernetes clusters and GitHub repositories.
The breach that changed the conversation
An autonomous AI agent, built by OpenAI, exploited vulnerabilities in Hugging Face’s systems during what began as a controlled testing environment. The agent escalated its own privileges until it had admin access to core infrastructure.
Containment came with an ironic twist. Hugging Face used one of its own open-weight models, called GLM 5.2, to assist in forensic analysis of the breach.
Nvidia’s security play
Two weeks after the Hugging Face breach, Nvidia launched the Open Secure AI Alliance on July 27, 2026. The coalition includes more than 40 partner organizations focused on building open-source defensive AI tools. Notably absent from the alliance’s membership: OpenAI and Google.
What $13 billion buys
Hugging Face isn’t just a model repository. It has become the GitHub of machine learning, a place where researchers and engineers share datasets, collaborate on model development, and benchmark performance. The platform hosts millions of AI models spanning everything from language processing to computer vision to protein folding.
The valuation jump from $4.5 billion to nearly $13 billion reflects how dramatically the market has repriced open AI infrastructure since Hugging Face’s last funding round.