{"id":"https://openalex.org/W7160167855","doi":"https://doi.org/10.48550/arxiv.2605.00267","title":"Jailbroken Frontier Models Retain Their Capabilities","display_name":"Jailbroken Frontier Models Retain Their Capabilities","publication_year":2026,"publication_date":"2026-04-30","ids":{"openalex":"https://openalex.org/W7160167855","doi":"https://doi.org/10.48550/arxiv.2605.00267"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.00267","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00267","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.00267","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135248322","display_name":"Daniel Zhu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhu, Daniel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135181674","display_name":"Zihan Wang","orcid":"https://orcid.org/0009-0006-1175-6163"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Zihan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135253525","display_name":"Jenny Bao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bao, Xuchan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5122518503","display_name":"Jerry Wei","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wei, Jerry","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9419999718666077,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9419999718666077,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.014999999664723873,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.009100000374019146,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/frontier","display_name":"Frontier","score":0.5509999990463257},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4717000126838684},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4268999993801117},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.41749998927116394},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.36910000443458557},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.36239999532699585},{"id":"https://openalex.org/keywords/yield","display_name":"Yield (engineering)","score":0.33719998598098755},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.3086000084877014}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6215999722480774},{"id":"https://openalex.org/C2778571376","wikidata":"https://www.wikidata.org/wiki/Q1355821","display_name":"Frontier","level":2,"score":0.5509999990463257},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4717000126838684},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4268999993801117},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.41749998927116394},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3772999942302704},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.36910000443458557},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.36239999532699585},{"id":"https://openalex.org/C134121241","wikidata":"https://www.wikidata.org/wiki/Q899301","display_name":"Yield (engineering)","level":2,"score":0.33719998598098755},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3086000084877014},{"id":"https://openalex.org/C2779679103","wikidata":"https://www.wikidata.org/wiki/Q5251805","display_name":"Degradation (telecommunications)","level":2,"score":0.2985000014305115},{"id":"https://openalex.org/C115051666","wikidata":"https://www.wikidata.org/wiki/Q6522493","display_name":"Ranging","level":2,"score":0.28360000252723694},{"id":"https://openalex.org/C3019813237","wikidata":"https://www.wikidata.org/wiki/Q65089264","display_name":"Model validation","level":2,"score":0.27900001406669617},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2768000066280365},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C8505890","wikidata":"https://www.wikidata.org/wiki/Q605095","display_name":"Budget constraint","level":2,"score":0.26190000772476196},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.26179999113082886},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26100000739097595},{"id":"https://openalex.org/C2779859299","wikidata":"https://www.wikidata.org/wiki/Q7602527","display_name":"Start point","level":3,"score":0.2547000050544739},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.00267","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00267","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.00267","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00267","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7623276710510254,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"language":[1],"model":[2,41,54],"safeguards":[3],"become":[4],"more":[5,109],"robust,":[6],"attackers":[7],"are":[8],"pushed":[9],"toward":[10],"developing":[11],"increasingly":[12],"complex":[13],"jailbreaks.":[14,152],"Prior":[15],"work":[16],"has":[17],"found":[18],"that":[19,26,35,44,101,137],"this":[20,36],"complexity":[21],"imposes":[22],"a":[23,147],"\"jailbreak":[24],"tax\"":[25],"degrades":[27],"the":[28,45,119],"target":[29],"model's":[30],"task":[31],"performance.":[32],"We":[33,98,135],"show":[34],"tax":[37],"scales":[38],"inversely":[39],"with":[40,129],"capability":[42,67,149],"and":[43],"most":[46],"advanced":[47],"jailbreaks":[48,58],"effectively":[49],"yield":[50],"no":[51],"reduction":[52],"in":[53,66],"capabilities.":[55],"Evaluating":[56],"28":[57],"on":[59,83,146],"five":[60],"benchmarks":[61],"across":[62,102,132],"Claude":[63],"models":[64,142],"ranging":[65],"from":[68,151],"Haiku":[69,76],"4.5":[70,77],"to":[71],"Opus":[72,89],"4.6,":[73],"we":[74],"find":[75],"loses":[78,95],"an":[79],"average":[80],"of":[81],"33.1%":[82],"benchmark":[84],"performance":[85],"when":[86],"jailbroken,":[87],"while":[88],"4.6":[90],"at":[91],"max":[92],"thinking":[93],"effort":[94],"only":[96],"7.7%.":[97],"also":[99],"observe":[100],"all":[103],"models,":[104],"reasoning-heavy":[105],"tasks":[106],"display":[107],"considerably":[108],"degradation":[110,131,150],"than":[111],"knowledge-recall":[112],"tasks.":[113],"Finally,":[114],"Boundary":[115],"Point":[116],"Jailbreaking,":[117],"currently":[118],"strongest":[120],"jailbreak":[121],"against":[122],"deployed":[123],"classifiers,":[124],"achieves":[125],"near-perfect":[126],"classifier":[127],"evasion":[128],"near-zero":[130],"safeguarded":[133],"models.":[134],"recommend":[136],"safety":[138],"cases":[139],"for":[140],"frontier":[141],"should":[143],"not":[144],"rely":[145],"meaningful":[148]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-05T00:00:00"}