Last seen October 15, 2026

Chrome Security Incident

Xbow earned a $250K bug bounty and all the AI model got was a lousy t-shirt

Technical Severity
Low severity
Lifecycle Status

NEW

Sources

What Happened

Xbow earned a $250K bug bounty and all the AI model got was a lousy t-shirt

Why This Matters

Current evidence identifies a security issue involving Chromework, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Chromework is present in your environment and review the affected configuration.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Oct 15, 2026 00:42

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Primary entities:

GoogleOpenAIChromeworkopenai/openai-pythonbuiltburned

Timeline

  • Incident first seen
    Oct 15, 2026 00:42

    BugSkan first recorded this incident.

  • Security researchers spent 6 days doing their Chromework, built 1B user exploit
    Oct 15, 2026 00:42

    theregister.com · Research

Sources

Security researchers spent 6 days doing their Chromework, built 1B user exploit

theregister.com · Oct 15, 2026 00:42

Xbow earned a $250K bug bounty and all the AI model got was a lousy t-shirt

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence