OpenAI Astra Reaches Critical Threshold for Zero-Day Discovery and Exploit Chaining

OpenAI said its forthcoming Astra model is its first to reach the “Critical” cybersecurity-capability threshold under its Preparedness Framework. In controlled, expert-led evaluations, the company said Astra identified previously unknown vulnerabilities and produced working exploit chains for browser compromise, sandbox escape, host command execution, and operating-system privilege escalation. OpenAI reported that Astra achieved 100% on ExploitBench and found two zero-day flaws while assessing 20 recently disclosed high-severity V8 vulnerabilities; it said the flaws are being disclosed to the relevant maintainers.

The company delayed parts of Astra’s training and release process to implement additional controls, then resumed a large frontier reinforcement-learning run after adding requirements intended to prevent malicious cyber use and unauthorized model actions. Safeguards include refusal training, abuse classifiers, monitoring for misalignment and jailbreaks, restricted tooling and networking, and sandboxed environments, though OpenAI cautioned that they may interrupt legitimate defensive work. Astra will initially be limited to a small alpha-tester group, followed by defensive-use access through OpenAI’s Daybreak Blue program, before any broader public availability.