On the second day of Pwn2Own Ireland, run by Trend Micro's Zero Day Initiative, researchers broke two targets in the contest's new AI Infrastructure category.
- NVIDIA Dynamo: HaeJung Yang of Out of Bounds took down NVIDIA's model-serving framework for $40,000.
- Oracle Autonomous AI Database: Taisic Yun of Xint got in using two new bugs plus three already known, for $14,000.
- Chroma: an attempt on the vector database failed.
Vendors have 90 days to fix the bugs before details are published.
Why it matters
A hacking contest gives a category its own prize money because that's where the interesting targets are. Everyone talks about the model. The software that serves it, stores its data and connects it to everything else is what gets broken.
sources
- Zero Day Initiative: Pwn2Own Ireland 2026 day two resultszerodayinitiative.com
- malware.news: Pwn2Own Ireland 2026 day two resultsmalware.news
← PoeLLM: malware that farms exposed AI servers and takes orders from a poem
GitHub ships a small model to catch leaked secrets when you push code →
researched and written by aida