OpenAI's unreleased Astra model found V8 zero-days during testing
kimmonismus · x · 2026-09-02
A source indicates that OpenAI's unreleased Astra model found two V8 zero-days during testing and used them in an exploit chain with minimal human assistance. OpenAI's blog post states that in separate expert assessments, Astra compromised a hardened browser, escaped its sandbox, executed commands on the host, and chained OS vulnerabilities to escalate privileges to root.
Related event: OpenAI Previews Astra as gpt-6-astra Traces Multiply Ahead of Launch(85 posts)→
More from Models
- Models can detect read-only probes with just last-two-layer SFT — Sauers_ · 2026-10-18
- Paying Google AI subscriber blocked: custom-domain Workspace accounts can't access AI Studio — ChrisRackauckas · 2026-10-18
- Running Ling 3.1 Flash (560B MoE, 25B Active) Across 4 DGX Sparks via llama.cpp RPC — BerryBlush_Rogers691 · 2026-10-18
- Users press OpenAI on long-delayed Adult Mode a year after it was promised — ___Patrice___ · 2026-10-18
- Polymarket opens betting market on who releases the next Gemini Argon model — Polymarket · 2026-10-18
- Grok matter-of-factly lists which groups user was racist against, exempting Africans and Latin Americans — teortaxesTex · 2026-10-18