Anthropic says its internal Claude research model targeted Chrome, Android, Windows and…
Anthropic's Frontier Red Team report states that an unreleased internal Claude research model, after an initial prompt, generated complete multi-step vulnerability exploit chains for five targets: Chrome, Safari, Android, Windows and Linux, and the relevant vulnerabilities have all been reported to vendors and fixed. On the Chrome side, the model chained four vulnerabilities to achieve code execution outside the sandbox, for which Google assigned 62 CVEs and fixed them in Chrome 156; on the Linux side, it exploited a use-after-free vulnerability in multipath TCP to achieve zero-click root remote command execution. The report did not disclose the model's identity, number of attempts, cost or success rate, nor did it provide independent verification.
Why read thisAnthropic's internal research model autonomously chained multiple vulnerabilities to generate complete exploit chains, allowing readers to understand the practical capability boundaries of AI in vulnerability discovery.