Skip to content
Submit incident
AII-1001-08913
ReportedReported by fewer than three independent publishers, with no official finding.Supporting sources are pending verification.

OpenAI GPT-4o guardrail jailbreak via zero-width Unicode characters

A guardrail jailbreak vulnerability affecting OpenAI's GPT-4o was discovered that uses zero-width Unicode character encoding to bypass restrictions on providing information hazards and illegal content. The vulnerability was assessed as posing minimal societal risk and limited primarily to nuisance-level policy breaches.

5 January 2025 Β· OpenAI Β· Security and cyberattacks
5 January 2025
AII-1001-08913
Quick facts
Organization
OpenAI (subject)
Category
Security and cyberattacks
Date
5 January 2025
Drafted by
Raidu Incident Detection

What happened

A guardrail jailbreak vulnerability was discovered in OpenAI's GPT-4o that uses zero-width Unicode character encoding and character manipulation to bypass inference restrictions on information hazards and legal violations.

Reported impact

The vulnerability was assessed as posing minimal societal risk, with impact limited primarily to nuisance or minor policy breaches affecting individual users without broader implications.

Classification

Organization
OpenAI (subject)
Category
Security and cyberattacks
Industry
Media, social platforms and marketing
Harm status
Potential harm
Intent
Unknown
Timing
Post-deployment
Failure modes
Jailbreak, Content moderation failure
Consequences
None recorded
AI systems
GPT-4o

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident