Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

Security firm XBOW used OpenAI's GPT-5.6 Sol model to develop a full-chain exploit for Google Chrome in six days, earning a $250,000 bug bounty. The exploit bypassed Chrome's sandbox protections to run code on Windows without user interaction. Google confirmed and patched the vulnerabilities in August and September 2026.