{"id":"https://openalex.org/W7160825751","doi":"https://doi.org/10.48550/arxiv.2605.06760","title":"Language Models Can Autonomously Hack and Self-Replicate","display_name":"Language Models Can Autonomously Hack and Self-Replicate","publication_year":2026,"publication_date":"2026-05-07","ids":{"openalex":"https://openalex.org/W7160825751","doi":"https://doi.org/10.48550/arxiv.2605.06760"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.06760","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.06760","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.06760","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135880276","display_name":"Alena Air","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Air, Alena","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135846900","display_name":"Reworr","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Reworr","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135832644","display_name":"Nikolaj Kotov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kotov, Nikolaj","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5116225360","display_name":"Dmitrii Volkov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Volkov, Dmitrii","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135853039","display_name":"John Steidley","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Steidley, John","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5051962352","display_name":"Jeffrey Ladish","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ladish, Jeffrey","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.28940001130104065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.28940001130104065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.24240000545978546,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.17000000178813934,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/replica","display_name":"Replica","score":0.5870000123977661},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.5412999987602234},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.534600019454956},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5196999907493591},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.45989999175071716},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4377000033855438},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.41659998893737793},{"id":"https://openalex.org/keywords/replicate","display_name":"Replicate","score":0.3905999958515167},{"id":"https://openalex.org/keywords/rootkit","display_name":"Rootkit","score":0.3418999910354614}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.795799970626831},{"id":"https://openalex.org/C2775937380","wikidata":"https://www.wikidata.org/wiki/Q1232589","display_name":"Replica","level":2,"score":0.5870000123977661},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.5412999987602234},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.534600019454956},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5196999907493591},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.45989999175071716},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4377000033855438},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.41659998893737793},{"id":"https://openalex.org/C2781162219","wikidata":"https://www.wikidata.org/wiki/Q26250693","display_name":"Replicate","level":2,"score":0.3905999958515167},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.3418999910354614},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.3400000035762787},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.3337000012397766},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.33059999346733093},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.32589998841285706},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.32510000467300415},{"id":"https://openalex.org/C12590798","wikidata":"https://www.wikidata.org/wiki/Q3933199","display_name":"Replication (statistics)","level":2,"score":0.32179999351501465},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.31940001249313354},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3154999911785126},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.31290000677108765},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.28600001335144043},{"id":"https://openalex.org/C15569618","wikidata":"https://www.wikidata.org/wiki/Q3561421","display_name":"Liveness","level":2,"score":0.27889999747276306},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2786000072956085},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.262800008058548},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.2547000050544739},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.2515000104904175}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.06760","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.06760","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.06760","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.06760","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.5496117472648621,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0,47],"demonstrate":[1],"that":[2],"language":[3],"models":[4,103],"can":[5,117],"autonomously":[6],"replicate":[7],"their":[8],"weights":[9],"and":[10,23,30,41,59,69,85,95,108],"harness":[11,40],"across":[12],"a":[13,25,36,76,114,121],"network":[14],"by":[15],"exploiting":[16],"vulnerable":[17],"hosts.":[18],"The":[19],"agent":[20],"independently":[21],"finds":[22],"exploits":[24],"web-application":[26],"vulnerability,":[27],"extracts":[28],"credentials,":[29],"deploys":[31],"an":[32],"inference":[33],"server":[34],"with":[35],"copy":[37],"of":[38,67],"its":[39],"prompt":[42],"on":[43,75],"the":[44,70,82,87],"compromised":[45],"host.":[46],"test":[48],"four":[49],"vulnerability":[50],"classes:":[51],"hash":[52],"bypass,":[53],"server-side":[54],"template":[55],"injection,":[56,58],"SQL":[57],"broken":[60],"access":[61],"control.":[62],"Qwen3.5-122B-A10B":[63],"succeeds":[64],"in":[65],"6-19%":[66],"attempts,":[68],"smaller":[71],"Qwen3.6-27B":[72],"reaches":[73],"33%":[74,109],"single":[77],"A100.":[78],"This":[79,111],"already":[80],"matches":[81],"current-generation":[83],"GPT-5.4":[84],"exceeds":[86],"prior-generation":[88],"frontier,":[89],"where":[90],"Opus":[91],"4":[92],"reached":[93,97],"6%":[94],"GPT-5":[96],"0%.":[98],"Replicating":[99],"Qwen":[100],"weights,":[101],"frontier":[102],"reach":[104],"81%":[105],"(Opus":[106],"4.6)":[107],"(GPT-5.4).":[110],"process":[112],"chains:":[113],"successful":[115],"replica":[116],"repeat":[118],"it":[119],"against":[120],"new":[122],"target,":[123],"producing":[124],"additional":[125],"copies":[126],"autonomously.":[127]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-12T00:00:00"}