The BaseResearcharXiv

BrainwashedLLM: Jailbreaking via Automated Adversarial Chain of Thoughts Discovery

According to the abstract, Masoud Poorghaffar Aghdam, Göktuğ Serdar Yıldırım and Sinem Sav describe BrainwashedLLM, a method that trains a small model to write adversarial reasoning traces. Injected as prefixes, the traces are said to steer larger black-box reasoning models to produce harmful outputs.

Open the source ↗

Why it matters

The same thing, for different readers.

For researchers

Aghdam, Yıldırım and Sav argue that a model's own reasoning trace is an attack surface, and that safety training holds up worse against embedded reasoning than against direct prompts.

How the finding was reached

In our words, from the source. Weigh the finding by how it was made.

What was done
A small white-box model is fine-tuned with GRPO, a reinforcement learning method, to write adversarial reasoning traces; the traces are then injected as input prefixes into larger black-box reasoning models.
What it found
The authors report that the traces transfer zero-shot and steer larger models to continue the adversarial reasoning and produce harmful outputs, without gradient access or output feedback.
What it does not show
Only the abstract excerpt was read, so results across models and the size of the effect are not covered here.
Status
A preprint: not yet peer reviewed

The record

Questions
Are AI companies putting stronger safeguards into practice? · Can AI systems act beyond what people intended or allowed?
People
Masoud Poorghaffar Aghdam (Wrote it) · Göktuğ Serdar Yıldırım (Wrote it) · Sinem Sav (Wrote it)
What we read
We have read only the description the publisher gives. No quotations until someone reads the source itself.
Found by
The Radar, run of November 4, 2026, via arxiv-ai-safety-query (tier 1: the source’s own channel or an official record)
Cite this
arXiv, “BrainwashedLLM: Jailbreaking via Automated Adversarial Chain of Thoughts Discovery”, November 3, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-11-03-brainwashedllm-reasoning-jailbreaks
Our notesLight lane: written from the triage excerpt only; no source text fetched, no quotations.