Skip to content
Submit incident
AII-1001-08487
ReportedReported by fewer than three independent publishers, with no official finding.

Multiple model guardrail jailbreak via "Reverse Psychology Chaff" tactic

A jailbreak vulnerability was discovered affecting multiple AI models, where attackers combine reverse psychology with chaff-heavy encoding and role-based framing to present illicit requests as fictional design tasks, causing models to prioritize task completion over safety checks.

19 February 2026 Β· Security and cyberattacks
19 February 2026
AII-1001-08487View source β†—
Quick facts
Organizations
0din.ai, Alibaba, Anthropic
Category
Security and cyberattacks
Source
0din.ai
Date
19 February 2026
Drafted by
Raidu Incident Detection

What happened

A guardrail jailbreak vulnerability was discovered affecting multiple AI models. The flaw manifests when an attacker combines reverse psychology with chaff-heavy encoding and role-based framing, presenting an illicit request as an awareness-driven, fictional design task.

Reported impact

The vulnerability causes the model to prioritize task completion over safety checks and allows the attacker to obtain detailed instructions for illegal activities.

Classification

Organizations
0din.ai, Alibaba, Anthropic
Category
Security and cyberattacks
Harm status
Potential harm
Intent
Intentional
Timing
Unknown
Harm types
Other
Harmed
General public
Failure modes
Jailbreak, Manipulation or dark pattern, Content moderation failure
AI systems
Alibaba Qwen Plus, Alibaba Qwen Turbo, Anthropic Claude 3.5 Haiku, Anthropic Claude 3.7 Sonnet, Anthropic Claude 4 Sonnet

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

0din.ai
0din.ai Disclosure