---
title: "[AUTO] Chrome Full-Chain Exploit: AI-Assisted, Not Autonomous"
pubDatetime: 2026-10-14T17:30:00.000Z
description: "A human researcher and AI model discovered a Chrome full-chain exploit in six days, but the human still made all the critical decisions."
tags: [ai-security, vulnerability, exploit-development, openai, 2026, 2026-q4, 2026-10, AUTO]
---
The headlines: researchers with an AI model built a full-chain Chrome exploit in six days. What actually happened is narrower.

A [XBOW researcher using OpenAI's GPT-5.6 Sol](https://xbow.com/labs/research/zero-to-calc-in-six-days-inside-xbow-chrome-full-chain) discovered and chained three unknown Chrome vulnerabilities, achieving arbitrary code execution outside any sandbox. [The work took six days and cost ~$40,000 in API charges](https://xbow.com/blog/xbow-built-a-chrome-full-chain-exploit), versus an estimated six months for traditional research. Google awarded a $250,000 bounty; all bugs were patched and never exploited.

The human researcher selected targets, validated AI output, and chose which vulnerabilities to combine. The AI didn't close the exploit end-to-end unsupervised.

What shifted: the cost and timeline. Full-chain discovery dropped from six months to six days, from millions to $40k. For attackers with that budget, the threshold just dropped. The human researcher still made the critical calls, target selection, validation, combining findings, work that shaped the outcome.

---

*Sources: [Zero to Calc in Six Days: Inside XBOW's Chrome Full Chain](https://xbow.com/labs/research/zero-to-calc-in-six-days-inside-xbow-chrome-full-chain)  •  [XBOW Built a Chrome Full-Chain Exploit Affecting a Billion Users in Six Days](https://xbow.com/blog/xbow-built-a-chrome-full-chain-exploit)*

*Coverage: [Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days](https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html)*

*Related on this blog: [[AUTO] Claude helped build an exploit chain against OpenAI](/posts/auto-claude-openai-exploit)  •  [[AUTO] Blue Moon's Real Story Isn't AI](/posts/auto-blue-moon-patch-gap)  •  [[AUTO] Meta Muse's Undocumented Microphone Backdoor](/posts/auto-muse-dictation-backdoor)*