OpenAI GPT-6 Astra Reaches 100% Exploit Generation Accuracy on ExploitBench

OpenAI has unveiled GPT-6 Astra, its latest model that demonstrates unprecedented capability in generating working exploits from known vulnerabilities. The model scored a perfect 100% on ExploitBench, significantly outperforming the previous GPT-5.6 Sol at 78.5%. In tests involving recently disclosed vulnerabilities, Astra achieved arbitrary code execution in 39% of cases compared to 11.5% for its predecessor and discovered two previously unknown zero-day flaws. Due to these capabilities, OpenAI has restricted the public release to safe code analysis and patch development only, blocking requests for proof-of-concept exploits. Expanded access for vulnerability research and malware analysis will be provided through the Daybreak program to selected defenders, while the company adds stronger jailbreak protections and activity monitoring.

AntiMalwareTranslated from Russian

Read at source

OpenAI has introduced GPT-6 Astra, describing it as the most intelligent and human-aligned model to date. The system can operate computers and browsers, write code, solve scientific problems, and generate exploits with exceptional precision, prompting the company to withhold an unrestricted release.

On the ExploitBench benchmark, which evaluates an AI's ability to convert known vulnerabilities into functional exploits, Astra achieved a perfect score of 100%. This marks a substantial improvement over the previous GPT-5.6 Sol, which reached only 78.5%.

In separate evaluations using newly disclosed vulnerabilities, the model successfully executed arbitrary code in 39% of attempts, compared to 11.5% for its predecessor. During these tests, Astra also identified two previously unknown zero-day vulnerabilities, which OpenAI has shared with the affected software vendors.

Expert testing without public safeguards showed that Astra can exploit unknown vulnerabilities to achieve code execution in hardened browsers and develop privilege-escalation exploits for modern operating systems. Consequently, the publicly available version is limited to secure code analysis and patch preparation, while requests to create PoC exploits are automatically rejected.

Advanced access for vulnerability assessment, malware analysis, and detection tool development will be distributed through the Daybreak program. OpenAI has also strengthened jailbreak defenses and implemented continuous activity monitoring that may interrupt even legitimate cybersecurity tasks and require user confirmation.

The model is currently being rolled out to selected organizations. It will later become available to ChatGPT Plus, Pro, Business, and Enterprise subscribers, as well as through the API, Microsoft Azure, and AWS Bedrock. In parallel, OpenAI has committed $1 billion to supply advanced AI tools to energy providers, banks, water utilities, government agencies, and open-source developers.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in AI Security

Logical Argument Claims Full Alignment of Superintelligent AGI Is Fundamentally Impossible
Claude Account Bans Linked to IP Reputation, Device Environment and Payment Channels, But No Confirmed Formula
Local LLMs in AppSec: What Open Tools and Models Can Handle in Application Security