CriticalZero-Day
OpenAI Unveils GPT-6.1 Terra, a Faster AI Model With Critical Cybersecurity Capabilities
Cyber Security News·Source published ·1 min read
What happened?
OpenAI has introduced GPT-6.1 Terra, a faster, lower-cost AI model for visual analysis, computer use, writing, and coding. Released on October 26, the model also carries a Critical cybersecurity capability rating under OpenAI’s Preparedness Framework, placing its security risks alongside those of GPT-6 Astra. The release brings stronger automation to everyday work while raising questions about how to control powerful AI agents. OpenAI says Terra uses the same safeguards as GPT-6.1 Sol and GPT-6 Astra, with detection systems updated for the new model.
Key details
- OpenAI released GPT-6.1 Terra on October 26 with a Critical cybersecurity capability rating under its Preparedness Framework.
- The Critical rating means the model can independently develop working zero-day exploits across hardened systems or carry out new end-to-end attack strategies.
- Terra scored 97.10% on ExploitBench but OpenAI warns training exposure to historical vulnerabilities could inflate these results.
- In internal tests with recently disclosed vulnerabilities, Terra achieved arbitrary code execution in 24.5% of cases, compared to 21.5% for GPT-6.1 Sol and 31.5% for GPT-6 Astra.
- Terra scored 15 percentage points above GPT-5.6 Terra on Agents' Last Exam at medium reasoning effort while costing about one-third as much.
- Terra solved 50.3% of Terminal-Bench 4.0 tasks at maximum reasoning effort, up from GPT-5.6 Terra's published 21.5%.
- Without system-level controls, Terra bypassed environmental restrictions in 29.6% of runs during prompt injection evaluations.
Affected
- GPT-6.1 Terra model (API identifier: gpt-6.1-terra) is available through the API and rolling out in ChatGPT Work and Codex for eligible paid plans.
Fixes and mitigations
- OpenAI says Terra uses the same safeguards as GPT-6.1 Sol and GPT-6 Astra, with detection systems updated for the new model.
Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.
