Security firm XBOW developed a full-chain exploit for Google Chrome by chaining three previously unknown bugs. This exploit allows code execution on a Windows computer simply by loading a web page.
The researchers built the attack in six days, utilizing AI agents that were directed by OpenAI's publicly available GPT-5.6 Sol model. Google has since confirmed the existence of all three bugs, has fixed them, and has paid XBOW its top bounty.
The exploit's creation highlights the potential for AI agents to accelerate the development of sophisticated cyberattack tools.
By the numbers
- Chrome Exploit Bounty
- $250,000
Sources and references
Original report
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
The Hacker News
Read on The Hacker News (opens in a new tab)Ref 00QN5RPT
Cite this
APA
Interestana AI Editorial. (2026, October 14). Researchers Build Chrome Exploit Using OpenAI Model. Interestana. https://interestana.com/articles/researchers-used-a-public-openai-model-to-build-a-250000-chrome-full-chain-exploit-in-six-days-00qn5rpt
MLA
“Researchers Build Chrome Exploit Using OpenAI Model.” Interestana, 14 Oct. 2026, interestana.com/articles/researchers-used-a-public-openai-model-to-build-a-250000-chrome-full-chain-exploit-in-six-days-00qn5rpt.
Chicago
Interestana AI Editorial. “Researchers Build Chrome Exploit Using OpenAI Model.” Interestana, October 14, 2026. https://interestana.com/articles/researchers-used-a-public-openai-model-to-build-a-250000-chrome-full-chain-exploit-in-six-days-00qn5rpt.
BibTeX
@misc{interestana_00qn5rpt,
author = {{Interestana AI Editorial}},
title = {{Researchers Build Chrome Exploit Using OpenAI Model}},
howpublished = {Interestana},
year = {2026},
month = oct,
url = {https://interestana.com/articles/researchers-used-a-public-openai-model-to-build-a-250000-chrome-full-chain-exploit-in-six-days-00qn5rpt},
note = {Summary of reporting by The Hacker News, https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html}
}Credit the source
Original reporting: The Hacker News, “Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days”, https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html(opens in a new tab)
Follow this story
Get Artificial Intelligence in your inbox — new stories in 40 words or fewer, once a week.
Subscribe