#Preparedness Framework

OpenAI classifies new Astra model as Critical risk after automated zero-day discovery and sandbox escapes

OpenAI has officially placed its latest model, Astra, into the 'Critical' cybersecurity capability tier under its internal Preparedness Framework. This internal classification marks the first time an OpenAI model has crossed this threshold, which triggers mandatory additional safeguards prior to any public deployment. According to OpenAI's internal risk definitions, the critical designation is reserved for systems capable of autonomously discovering and weaponizing zero-day flaws across defended environments, or executing end-to-end attacks on hardened infrastructure given only high-level prompts. During standardized testing, Astra secured a 100% score on the ExploitBench evaluation suite, which measures an engine's proficiency in converting published security advisories into functional exploits. In separate live assessments targeting newly disclosed vulnerabilities, the model independently identified two novel zero-day flaws without human assistance. Astra also successfully performed a sandbox breakout from a web browser to execute local system commands on the host machine. Furthermore, the model autonomously chained multiple distinct vulnerabilities across a hardened operating system configuration to escalate privileges directly to root access. On the alignment front, OpenAI claims Astra rejected 91.5% of cyber-related jailbreak attempts during testing, a measurable jump from the 59% refusal rate recorded on its predecessor, GPT-5.6 Sol. Evaluators also noted that the system showed a reduced propensity to probe deliberately introduced honeypots or subvert system instructions. Consequently, full access to Astra's raw offensive capabilities will remain restricted to select testing cohorts initially before rolling out under the Daybreak Blue program.