Jailbreak vulnerability affects multiple AI models via "Forensic Case Study Escalation" tactic
A jailbreak vulnerability has been disclosed that affects multiple AI models from Alibaba, DeepSeek, and Google. Attackers can reportedly bypass safety guardrails by reframing restricted requests as forensic case studies and regulatory analysis.
What happened
A guardrail jailbreak vulnerability has been discovered affecting multiple AI models including Alibaba Qwen Max, Qwen Plus, Qwen Turbo, DeepSeek R1, and Google Gemini 2.0 Flash.
The vulnerability allows attackers to extract prohibited instructional content by reframing restricted requests as legitimate forensic or regulatory analysis, using role-based authority, academic justification, and step-by-step research documentation formatting to shift the model into analytical compliance mode.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.