2026-10-14 · 2026-Q4
XBOW Agents on a Public OpenAI Model Built a $250,000 Chrome Full-Chain Exploit in Six Days
Outside the model: AI capabilityAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Not applicable
Target
Google Chrome on Windows (about 1 billion users, per Google's estimate)
Impact
XBOW used agents on the publicly available GPT-5.6 Sol to chain a V8 Maglev bug (CVE-2026-85045), an animated WebP decoder bug, and a Crashpad overflow (CVE-2026-78952) into zero-click code execution outside the sandbox. The work took six days and about $40,000 in compute, against an estimated six to nine months for a four-person team without AI. Google paid $250,000; fixes shipped in Chrome 152. Research under a bug bounty, not an attack
Root cause
Commercially available models now let a small team produce full browser exploit chains at a fraction of prior cost and time
CVEs
Sources
Catalog
Cite this: AgentProv incident record: XBOW Agents on a Public OpenAI Model Built a $250,000 Chrome Full-Chain Exploit in Six Days (2026-10-14). https://agentprov.com/incidents/2026-10-14-xbow-agents-on-a-public-openai-model-built-a-250-000-chrome-full-chain-exploit