OpenAI's Astra model finds and chains V8 zero-days to gain root access
kimmonismus · x · 2026-09-02
OpenAI revealed that its unreleased Astra model discovered two V8 zero-days and chained them into an exploit with minimal human help. Astra compromised a hardened browser, escaped its sandbox, and executed commands on the host. It escalated privileges from an unprivileged account to root. OpenAI has classified Astra as 'Critical' for cybersecurity.
Related event: OpenAI Previews Astra as gpt-6-astra Traces Multiply Ahead of Launch(85 posts)→
More from Models
- DeepSeek V4.1 Flash enters BuildingBench top five at 1/15 of Sonnet's cost — Lianhuiq · 2026-10-18
- MOSS SFT vs Flux 3 Klein vs SD 3.0: Same-Prompt Comparison Exposes SD3's Age — ZootAllures9111 · 2026-10-18
- Quick take: GPT-6 matches Opus 5.5 at coding, far ahead at computer use — _vztu · 2026-10-18
- Open models now above Sol-level, outpacing expectations as community awaits V4.1 Pro — yacineMTB · 2026-10-18
- Codex took 3 days, Opus 5.5 nailed it in an afternoon — banned user's video protest — dotey · 2026-10-18
- Yacine MTB: Users will remember how Anthropic treated them once intelligence proliferates — yacineMTB · 2026-10-18