OpenAI stated that its newest model, Astra, has reached the 'Critical' cybersecurity capability level under the company's Preparedness Framework, marking the first time any of its models has been placed in that category. ^[1] On August 14, 2026, the AI lab Z.ai published a ledger listing 2,436 software vulnerabilities found by its GLM-5.3 model across 269 open-source projects. ^[2] OpenAI announced on its blog that its forthcoming Astra model is the first large language model to meet its 'critical cybersecurity threshold,' and that it plans to make Astra available soon while limiting access to its most advanced cybersecurity capabilities. ^[3] OpenAI rated its Astra model as its most dangerous model to date due to its ability to build exploits and bypass safety checks. ^[4] During a separate evaluation involving more recently disclosed flaws, Astra uncovered two zero-day vulnerabilities on its own. ^[5] OpenAI reported that Astra now declines 91.5% of cyber-related jailbreak attempts in its testing, up from 59% for its predecessor, GPT-5.6 Sol. ^[6] On August 20, 2026, a measurement showed that 28.3% of 46 core npm packages had shipped nothing in the previous 90 days. ^[7] On August 20, 2026, a measurement showed that 39.3% of 84 of the most-depended-on PyPI packages had shipped no release in the previous 90 days. ^[8] The 2,436 findings included 107 critical vulnerabilities and 990 high-severity vulnerabilities, affecting projects such as the Linux kernel, Redis, WebKit, and FreeBSD. ^[9] OpenAI reported that Astra scored a perfect score on ExploitBench, an evaluation of an LLM's ability to hack into known system vulnerabilities, and that in a modified test developed by OpenAI engineers, Astra discovered and exploited two zero-day vulnerabilities. ^[10] OpenAI said its Astra model is capable of finding unknown security flaws in computer systems and exploiting them without a person's guidance. ^[11] In expert-led tests, Astra built a full compromise chain against a browser, broke out of the sandbox, and ran commands on the host the moment the browser opened an HTML file. ^[12]