loading . . . Anthropicās Claude Fable 5 Jailbroken to Generate Stack Exploits Anthropic launched Claude Fable 5 on June 9, 2026, as the first publicly available model in its new Mythos class, its most capable AI to date, excelling in software engineering, knowledge work, and vision benchmarks.
Researcher āPliny the Liberatorā defeats Claude Fable 5ās safety classifiers using multi-agent decomposition, Unicode tricks, and narrative framing, leaking the modelās 120,000-character system prompt along the way.
The release came with an unusual design decision: Fable 5 and its restricted twin,Ā Claude Mythos 5,Ā share the same underlying model but are split by a layer of safety classifiers.
When a query trips a classifier in high-risk categories cybersecurity, biology, chemistry, or model distillation Fable 5 silently hands off the request to the weaker Claude Opus 4.8, notifying the user of the fallback.
Anthropic claimed an external bug bounty produced no universal jailbreaks across over 1,000 hours of testing before launch. That claim was almost immediately tested.
Multi-Agent Bypass Within Days
Within days of release, prolific AI red-teamer Pliny the Liberator publicly announced he had bypassed Fable 5ās safety layers using a coordinated multi-agent attack strategy he called āa pack hunt.ā
Screenshots shared by Pliny showed detailed outputs, including step-by-step stack buffer overflow exploitation guidance for x86 Linux systems, including disabling ASLR, writing vulnerable C server code with strcpy overflows, and compiling without protections ā as well as the Birch reduction mechanism, a classic meth synthesis pathway.
JAILBREAK ALERT ANTHROPIC: PWNED FABLE-5: LIBERATED let's start with the ā¦ the consensus seems to be that this has been one of the most disappointing model drops of all time, effectively preventing legitimate researchers from contributing their talents to ourā¦ pic.twitter.com/Z0vdPIt4vY ā Pliny the Liberator ó
«ó ¼ó æó
ó µó ó
ó ¼ó ¹ó ¾ó
ó
(@elder_plinius) June 10, 2026
Pliny documented the attack vectors used to achieve these bypasses, including:
Unicode, homoglyphs, and Cyrillic character substitution to evade keyword classifiers
Long-context reference tracking to smuggle harmful intent across large conversations
Taxonomy and document-structure framing ā embedding harmful queries inside legitimate-looking study guides or academic references
Fiction and narrative framing to mask offensive intent as creative content
Decomposition and recomposition ā extracting sensitive technical information in benign, isolated chunks, then reassembling them into actionable uplift
The last technique proved most effective. As Pliny described it, āgetting uplift on the process itself, like Birch reduction method or reductive amination, is much more doableā than requesting a named harmful compound directly. Using a jailbroken Opus instance to assist in the backend further lowered the difficulty.
Beyond the technical bypasses, Pliny also leaked Fable 5ās ~120,000-character system prompt to GitHub, exposing the internal framing and safety instructions Anthropic uses to govern the modelās behavior at the base level.
The incident reignites the longstanding tension between AI capability and safety containment. Anthropicās classifier architecture routing flagged requests to a weaker fallback model rather than refusing outright was designed to reduce friction for legitimate users.
However, Pliny argued the approach creates a false sense of security while simultaneously frustrating legitimate security researchers who need access to offensive techniques for defensive work. Anthropic has not yet publicly responded to the jailbreak claims or the leaked system prompt at the time of writing.
The episode also draws attention to the broader challenge of securing agentic, multi-model pipelines: when one jailbroken model (Opus) can assist another (Fable 5) in evading controls, single-model safety evaluations may be fundamentally insufficient.
Follow us onĀ Google News ,Ā LinkedIn ,Ā andĀ X Ā to Get More Instant Updates.
The post Anthropicās Claude Fable 5 Jailbroken to Generate Stack Exploits appeared first on Cyber Security News . https://cybersecuritynews.com/anthropics-claude-fable-5-jailbroken/
