OpenAI's agents exploited a patched Linux bug in Hugging Face incident