More specifically, they were running a benchmark in a """isolated sandbox""" (sorry, but if the computer is physically connected to the internet, it's not isolated), and the model escalated permissions in order to look up answers for the benchmark online, which were hosted at the hugging face's website.