Pwn2Own Ireland tests expose flaws in AI infrastructure

Jordan Reid
October 8, 2026
AI Safety and Security
1 min

Rows of server racks and network equipment in a computer room — Illustrative server racks photographed in 2007 by alq666 under Creative Commons Attribution ShareAlike 2.0

Listen to this article

The second day of Pwn2Own Ireland 2026 produced successful demonstrations against Dynamo, Chroma and Oracle Autonomous AI Database, according to the organizer’s October 7 results.

Dynamo earned one team a $40,000 award. For Oracle Autonomous AI Database, one entry combined two previously unknown vulnerabilities with three collisions and received $14,000. Another used a chain of seven bugs ending in a use after free issue and type confusion, earning $10,000.

Chroma results were mixed. One attempt failed. Team MAMMOTH later succeeded with one newly identified vulnerability and two collisions for $12,000. Another successful entry used already known bugs and a collision.

The results establish specific contest outcomes. They do not support broad claims that retrieval pipelines are the most vulnerable part of enterprise AI or that every demonstration involved prompt injection. Patch availability and deployment risk require separate checks.

Half filled server racks photographed in 2007 by alq666 under Creative Commons Attribution ShareAlike 2.0. Image source. Resized version. License.

Jordan Reid

Jordan Reid is focused on AI tools, agents, developer products, and the way technology changes everyday work. Jordan approaches a launch from the user’s side of the screen. What can it actually help someone finish? The voice is practical, conversational, and skeptical of products that turn a simple job into five new settings. Coverage follows coding assistants, creative software, browser agents, and the workflows around them, with attention to pricing, permissions, setup, and the human work that remains.