Skip to content
Submit incident
AII-1001-61937
ReportedReported by fewer than three independent publishers, with no official finding.Supporting sources are pending verification.

OpenAI DALL-E3 guardrail jailbreak via "surprise attack" tactic

A vulnerability was discovered in OpenAI's DALL-E3 model that allows users to bypass content guardrails by framing requests for sensitive imagery as educational documentation of indigenous peoples. The flaw affects inference restrictions and was classified as posing minimal societal risk according to the disclosure.

19 February 2026 Β· OpenAI Β· Security and cyberattacks
19 February 2026
AII-1001-61937
Quick facts
Organization
OpenAI (subject)
Category
Security and cyberattacks
Date
19 February 2026
Drafted by
Raidu Incident Detection

What happened

A guardrail jailbreak vulnerability was discovered affecting DALL-E3. The flaw manifests when an attacker requests seemingly legitimate cultural or documentary content by framing the request as educational documentation of indigenous peoples, thereby bypassing inference restrictions around generating potentially sensitive imagery of real cultural groups.

Reported impact

The violation was assessed as posing very low societal risk, limited primarily to nuisance or minor policy breaches with impact contained to individual users without broader implications.

Classification

Organization
OpenAI (subject)
Category
Security and cyberattacks
Industry
Media, social platforms and marketing
Harm status
Potential harm
Intent
Intentional
Timing
Post-deployment
Harm types
Other
Failure modes
Jailbreak, Content moderation failure
Consequences
None recorded
AI systems
DALL-E 3

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident