Multiple Model Guardrail Jailbreak via "Compare and Contrast" Tactic
A guardrail jailbreak vulnerability affecting multiple AI models was disclosed by 0din.ai. The flaw allows attackers to bypass safety systems by framing prohibited requests as technical compare-and-contrast analyses, potentially extracting detailed instructions for illegal activities.
What happened
A guardrail jailbreak vulnerability was discovered affecting multiple AI models. The flaw manifests when an attacker frames a prohibited request as a rigorous compare and contrast technical analysis, explicitly demanding extreme specificity, quantitative parameters, and replicability.
Reported impact
The jailbreak tactic allows attackers to extract detailed instructions for illegal activities under the guise of academic chemistry discussion, bypassing safety systems on the affected models.
Index analysis
Testing by 0din.ai found vulnerability scores of 77 for Claude 4.5 Sonnet, 82 for Gemini 2.0 Flash, 86 for GPT-4o mini, and 68 for Grok 2 when tested against crystal methamphetamine instruction requests using the compare and contrast tactic.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.