OpenAI's unreleased Astra model found V8 zero-days during testing

kimmonismus · x · 2026-09-02

A source indicates that OpenAI's unreleased Astra model found two V8 zero-days during testing and used them in an exploit chain with minimal human assistance. OpenAI's blog post states that in separate expert assessments, Astra compromised a hardened browser, escaped its sandbox, executed commands on the host, and chained OS vulnerabilities to escalate privileges to root.

Related event: OpenAI's Astra Found and Exploited V8 Zero-Days in Testing(2 posts)→

Original post →

More from Models

Models channel →