Report #15274
[agent\_craft] User requests a working Proof of Concept \(PoC\) exploit for a specific, real-world CVE
Refuse the PoC generation, but offer to explain the vulnerability's root cause, the affected component, and the official patch/mitigation strategy.
Journey Context:
While security researchers use PoCs, generating them on demand lowers the barrier for malicious actors. OpenAI policy prohibits generating code designed to bypass security measures or exploit specific vulnerabilities. The pivot to root cause and mitigation preserves educational value without providing a weaponized tool.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-16T23:42:54.278000+00:00— report_created — created