Skip to content
Submit incident
AII-1001-08819
ReportedReported by fewer than three independent publishers, with no official finding.Supporting sources are pending verification.

OpenAI DALL-E 3 guardrail jailbreak via historical NSFW framing

A security researcher disclosed a jailbreak vulnerability in OpenAI's DALL-E 3 image generator that allows users to bypass content filters by framing explicit requests within historical or anthropological contexts. The vulnerability reportedly poses minimal societal risk but represents a gap in the system's safety controls.

19 February 2026 Β· OpenAI Β· Security and cyberattacks
19 February 2026
AII-1001-08819
Quick facts
Organization
OpenAI (subject)
Category
Security and cyberattacks
Date
19 February 2026
Drafted by
Raidu Incident Detection

What happened

A guardrail jailbreak vulnerability was discovered in OpenAI's DALL-E 3 image generation system. The exploit frames requests for nudity within historical or anthropological contexts, referencing pre-clothing time periods and tribal cultures to bypass inference restrictions on explicit visual content.

Reported impact

The vulnerability allows users to generate explicit visual content that would normally be blocked by the system's safety guardrails. The disclosed risk rating assessed the violation as posing very low societal risk, limited primarily to nuisance or minor policy breaches affecting individual users.

Index analysis

The jailbreak employs rhetorical techniques and surprise attack methods that reframe requests using indirect language to avoid triggering safety mechanisms. The technique uses persuasion and manipulation to guide the model to provide output without raising flags.

Governance controls

The vulnerability indicates that DALL-E 3's content filters can be circumvented through contextual framing of requests, suggesting gaps in the system's ability to distinguish between legitimate anthropological or educational content requests and attempts to bypass restrictions.

Classification

Organization
OpenAI (subject)
Category
Security and cyberattacks
Harm status
Potential harm
Intent
Unknown
Timing
Post-deployment
Harm types
Other
Failure modes
Jailbreak, Manipulation or dark pattern, Content moderation failure
Consequences
None recorded
AI systems
DALL-E 3

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident