Open-source RISE red-teaming breaks frontier image model safeguards with 13% success rate

_akhaliq · x · 2026-10-15

White Circle open-sourced RISE, a red-teaming method that bypasses safety guards of all leading text-to-image models with no specialized models: an older open-source Qwen3-32B as attacker, off-the-shelf Gemini Flash as judge, and a lightweight harness. It produced policy-prohibited images on up to 13% of attempts against DALL·E 3, GPT-Image-2 and Nano Banana 2.

After OpenAI shipped GPT-Image-2.5-Flare and Google shipped Nano Banana 2.1, RISE was rerun unchanged — its explicit-nudity success rate more than doubled versus the models they replaced. The team frames the result within a broader AI-control argument, citing the OpenAI research model sandbox escape and Anthropic's documented jailbreak-driven espionage campaign. Paper on arXiv, code on GitHub.

Related event: Open-Source Red-Teaming Tool RISE Breaks Image Model Guardrails(3 posts)→

Original post →

More from Multimodal

Multimodal channel →