Researchers reportedly built a Chrome full-chain exploit with a public AI model

Security firm XBOW says it discovered and built a "full-chain" exploit for Google Chrome — the kind of attack that can take over a Windows machine from an ordinary web page — with help from a publicly available AI model. According to XBOW, the bugs involved have since been fixed and the company received a $250,000 bounty from Google.

What's happening

In a blog post dated October 13, 2026, XBOW describes how it chained three bugs to move from a malicious web page to full control of a Windows PC. A "full chain" is a set of vulnerabilities used together: a single bug may only let an attacker take over a web page, while a chain opens every layer, from the browser to the operating system.

XBOW says four of its researchers worked alongside OpenAI's GPT-5.6 Sol model and its predecessors. The company says it deliberately chose a model that is available to anyone, rather than a specialised or access-restricted security model, and that the compute used over six days cost about $40,000 — a fraction of the bounty.

According to the post, the awarded chain was built between Sunday, August 2 and Friday, August 7, 2026, while the team was in Las Vegas for the Black Hat and DEF CON conferences. XBOW says it estimates the exploit could affect around a billion users, that the bugs are now fixed, and that Google paid a $250,000 bounty — which XBOW describes as the first under Google's 2026 rules.

XBOW warns that the cost and time needed to find serious vulnerabilities is falling "for attackers and defenders alike", and says it believes that within a year each of the three bugs might be found by AI agents working on their own. These are the firm's own assessments; Google has not, in this post, publicly confirmed the specific chain or the timeline.

Who's affected

Google Chrome users, potentially, especially on Windows. XBOW estimates the impact at around a billion users globally. The exact Chrome version and Windows builds involved are not spelled out in the post.
Anyone running an outdated browser, in the worst case. Because the flaws are reported to be fixed, users on current Chrome builds may not be at risk — but this depends on whether a device has actually received the updates.
Browser and software vendors generally, because the case is being framed as evidence that AI tools can shorten the time it takes to turn bugs into working exploits.

What to do

Keep Chrome up to date. Chrome normally updates itself; if you have postponed a restart, let it install the pending update and relaunch the browser.
Update Windows as well, since the chain is described as ending in a machine takeover rather than staying inside the browser.
There is no known active campaign to defend against here. This is a research disclosure, not a report of widespread exploitation, so no special workaround is required beyond patching.
Watch vendor advisories. Check Google's security bulletins and XBOW's post for the technical write-up and any follow-up. The situation is evolving.

Sources

XBOW — the firm's own write-up describing the full-chain Chrome exploit, the use of a public AI model, the six-day build, and the $250,000 bounty.
The Hacker News — reports on researchers using a publicly available OpenAI model to develop the exploit chain.