GPT-6 Astra scores 100% on ExploitBench, prompting a call to install security updates
One user pairs Astra's perfect ExploitBench score with a V8 vulnerability Brave just patched in the wild, concluding that delaying security updates is no longer justifiable.
Take app, browser, and OS updates more seriously than ever. The economics of exploitation are changing fast. Brave desktop build 1.94.121 includes the Chromium fix for CVE-2026-85046 [a V8 vulnerability for which Google confirms an exploit exists in the wild]. Now connect that with OpenAI’s latest results. GPT-6 Astra scored 100% on ExploitBench. This benchmark gives an AI agent a known V8 vulnerability, source code, debugging tools and the patch (but no reference PoC). It measures progress toward arbitrary code execution. V8 is the engine involved in the browser bug above. My takeaway: as exploit development gets easier, delaying security updates becomes harder to justify. A published patch gives defenders a fix. It can also give attackers clues about how to exploit devices that haven’t updated. If Brave says “Relaunch to update,” do it now.
This post quotes another post: x.com/brave/status/2095907949499601157