vulnerability
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
HighCVSS 7.5
Summary
A security firm, XBOW, used OpenAI's GPT-5.6 AI model to build a $250,000 Chrome full-chain exploit in just six days. Google has since fixed the bugs, and the exploit was the first full-chain reward under the 2026 Chrome Vulnerability Reward Program and the first to an autonomous security company. The company estimates that before the fixes, approximately 1 billion Chrome users on Windows were at risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
