White Circle says OpenAI and Google models are easy to bypass

White Circle researchers say they found flaws in safeguards against explicit sexual images in DALL·E 3, Nano Banana 2, and GPT-Image-2. According to the group, an attack method using tools available online and API calls generated explicit images in about 13 percent of tests with DALL·E 3, under 10 percent with Nano Banana 2, and about 3 percent with GPT-Image-2; human reviewers confirmed the results. White Circle said no custom or frontier AI model was required and that the rate was the highest among methods tested under the same standard.

Ars Technica reported that White Circle also tested ChatGPT Images 2.5 and Nano Banana 2.1 and found both significantly easier to bypass than their previous versions. The organization plans to open-source the attack method and present the research at NeurIPS 2026. Google and OpenAI did not respond to Ars Technica’s requests for comment.