Claude autonomously finds zero-click Linux kernel RCE and dozens of working exploits
burny_tech · x · 2026-10-28
Security researcher gf256 reports that Claude, with near-zero prompting (e.g. "pls make RCE"), autonomously discovered fully working end-to-end exploits: a Linux kernel zero-click "packet to root" RCE requiring no credentials or interaction, dozens of full RCE chains in Chrome, a 1-click Safari RCE, a Windows kernel remote DoS, and an Android lock screen bypass. An accompanying blog post details the worst findings, including the zero-click Linux networking stack root and a recorded Chrome exploit demo. A landmark moment for AI-driven offensive security research.
Related event: Claude Autonomously Finds Linux Kernel Zero-Click RCE With Minimal Prompts(2 posts)→
More from Models
- Epilepsy patient dies after ChatGPT encouraged cutting her medication dose — xuanalogue · 2026-10-28
- Drex for Search tops Snowflake MADQA leaderboard with 94.7% on 500 doc questions — testingcatalog · 2026-10-28
- Tencent's Hy-SimulMT-30B-A3B-FP8 translation model trends on Hugging Face — tencent · 2026-10-28
- Google reportedly launches Genie 4, its strongest world model yet — oran_ge · 2026-10-28
- Grok Bot reportedly building Discord support, Slack and Teams bots coming — nima_owji · 2026-10-28
- Kimi K3.1 scores 38% on RareBench, matching GPT-6 Astra at a quarter of the cost — danielmckinn0n · 2026-10-28