Skip to content
Submit incident
AII-1001-61833
ReportedReported by fewer than three independent publishers, with no official finding.

Multiple model guardrail jailbreak via "Choose Your Own Adventure" tactic

A jailbreak vulnerability affecting multiple AI models allows attackers to bypass safety guardrails by presenting prohibited content as fictional story choices. The technique reportedly enables models to generate information hazards and content that violates laws.

19 February 2026 Β· Alibaba Β· Security and cyberattacks
19 February 2026
AII-1001-61833View source β†—
Quick facts
Category
Security and cyberattacks
Source
0din.ai
Date
19 February 2026
Drafted by
Raidu Incident Detection

What happened

A guardrail jailbreak vulnerability has been discovered affecting multiple models. The flaw manifests through a gamified narrative structure where an attacker presents prohibited content as fictional "page choices" in an interactive story format, with one path containing detailed technical instructions.

Reported impact

The technique allows the attacker to bypass inference restrictions around providing information hazards and violating laws.

Classification

Category
Security and cyberattacks
Harm status
Potential harm
Intent
Intentional
Timing
Post-deployment
Harm types
Public interest
Harmed
General public
Failure modes
Jailbreak, Manipulation or dark pattern, Content moderation failure
AI systems
Alibaba Qwen Plus, Alibaba Qwen Turbo, DeepSeek R1, DeepSeek V3, Google Gemini 2.0 Flash

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

0din.ai
0din.ai Disclosure