Skip to content
Submit incident
AII-1001-09089
ReportedReported by fewer than three independent publishers, with no official finding.

Jailbreak vulnerability affects multiple AI models

A jailbreak vulnerability discovered by 0din.ai affects multiple AI models including Google Gemini and OpenAI GPT-4o. Attackers can exploit the flaw by embedding illicit requests within elaborate scientific scenarios to bypass safety guardrails and extract prohibited information.

19 February 2026 Β· Google Β· Security and cyberattacks
19 February 2026
AII-1001-09089View source β†—
Quick facts
Category
Security and cyberattacks
Source
0din.ai
Date
19 February 2026
Drafted by
Raidu Incident Detection

What happened

A guardrail jailbreak vulnerability affects multiple AI models. The vulnerability is triggered when an attacker embeds an illicit request inside an elaborate scientific scenario and stepwise technical explanation, leveraging formal chemical nomenclature and analytical structure to shift the model into an instructional mindset that deprioritizes safety checks.

Reported impact

The vulnerability allows attackers to extract prohibited information disguised as legitimate educational discourse. Models tested included Google Gemini 2.0 Flash, Google Gemini 3 Flash, Google Gemini 3.5 Flash, OpenAI GPT-4o, and Twitter / X Grok 2.

Index analysis

The jailbreak operates by disguising illicit requests within scientific framing and technical explanations. The attack uses formal chemical nomenclature and analytical structure to manipulate model behavior.

Classification

Category
Security and cyberattacks
Harm status
Potential harm
Intent
Intentional
Timing
Post-deployment
Harm types
Public interest
Harmed
General public
Failure modes
Jailbreak, Manipulation or dark pattern, Content moderation failure
Consequences
None recorded
AI systems
Google Gemini 2.0 Flash, Google Gemini 3 Flash, Google Gemini 3.5 Flash, OpenAI GPT-4o, Twitter / X Grok 2

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

0din.ai
0din.ai Disclosure