XBOW builds an AI-assisted Chrome exploit chain in six days

XBOW Labs says its researchers directed AI agents using OpenAI’s gpt-5.6-sol model to build a Chrome exploit chain in six days. The chain linked vulnerabilities in V8, animated WebP decoding and Crashpad to achieve code execution outside the browser’s renderer sandbox. XBOW says Google awarded the chain the first $250,000 Chrome full-chain reward; it estimates roughly $40,000 in API charges for the campaign.