Two months on, reasoning extraction still works on Astra via third-party APIs

jonasgeiping · x · 2026-10-01

jonasgeiping's team updates on their reasoning extraction attack two months after disclosure: a cited finding by kotekjediml shows reasoning can still be extracted from Astra/Sol-6.1 via third-party API providers, disclosed to OpenAI and Anthropic. The team notes providers have struggled to patch this thoroughly, with attacks working on Astra until this week. A full report is published, with more details in OpenAI's recent report.

Related event: Reasoning Extraction Flaw Still Reproducible Two Months After Discovery(2 posts)→

Original post →

More from Safety

Safety channel →