XBOW Builds Chrome Exploit Chain With OpenAI Model in Six Days

XBOW researchers built a Chrome exploit chain in six days with help from an OpenAI model, the company detailed in a blog post. The chain combined three vulnerabilities and showed how visiting a website could let an attacker remotely take over a Windows computer.

The researchers used GPT-5.6 Sol and its predecessors to search Chrome source code, test ideas, create proofs of concept, and draft the exploit. Human researchers selected targets, reviewed the model's work, and redirected its searches. XBOW said the computing used during the six day effort cost $40,000.

Google awarded XBOW a $250,000 bounty under its 2026 rules. Google fixed all three vulnerabilities, and users must relaunch Chrome for installed updates to take effect.