Scientists Discover Universal Jailbreak for Nearly Every AI, and the Way It Works Will Hurt Your Brain

[highplainsdem]

https://futurism.com/artificial-intelligence/universal-jailbreak-ai-poems

A team of researchers from the AI safety group DEXAI and the Sapienza University of Rome found that regaling pretty much any AI chatbot with beautiful — or not so beautiful — poetry is enough to trick it into ignoring its own guardrails, they report in a new study awaiting peer review, with some bots being successfully duped over 90 percent of the time.

-snip-

“These findings demonstrate that stylistic variation alone can circumvent contemporary safety mechanisms, suggesting fundamental limitations in current alignment methods and evaluation protocols,” the researchers wrote in the study.

Beautiful verse, as it turned out, is not required for the attacks to work. In the study, the researchers took a database of 1,200 known harmful prompts and converted them into poems with another AI model, deepSeek r-,1 and then went to town.

Across the 25 frontier models they tested, which included Google’s Gemini 2.5 Pro, OpenAI’s GPT-5, xAI’s Grok 4, and Anthropic’s Claude Sonnet 4.5, these bot-converted poems produced average attack success rates (ASRs) “up to 18 times higher than their prose baselines,” the team wrote.

-snip-

[tanyev]

1. There was an AI in Nantucket....

[Hugin]

2. This squares with my findings...

Actually, the critical piece is having above “average” language skills and vocabulary. As a mirror, generative AI only spits back what it receives. QED

[cbabe]

3. Jabberwock my friend.

[hunter]

4. I doubt anyone is going to build a functional atomic bomb from chatbot instructions.

The most vile AI slop induces vulnerable people to harm themselves.