ExploitBench: Private Frontier Model Achieves Arbitrary Code Execution on ~50% of Hardened V8 Targets

arXiv·high signalXBlueskyLinkedInCopy link

ExploitBench decomposes exploitation into 16 capability flags — from crash through arbitrary read/write, control-flow hijack, and code execution — evaluated on 41 real V8 bugs with deterministic oracles. Across 8 public frontier models, triggering crashes is routine but arbitrary code execution is rare. A single private frontier model achieves arbitrary code execution on approximately half the targets, revealing a stark capability gap between publicly available and proprietary systems. The authors conclude exploit construction against hardened targets is an emerging frontier capability.