# JailbreakBench

The work introduces the Perturbed Embedding Vector (PEV) jailbreak: adding independent Gaussian noise to a prompt's embedding and resampling it repeatedly, with no gradient computation and no weight modification, achieves a 100% jailbreak rate on all 100 JailbreakBench prompts across six open-weight LLMs, with the first successful jailbreak typically arriving within one minute and at lower compute cost than the compared prior methods.

The work introduces the Perturbed Embedding Vector (PEV) jailbreak: adding independent Gaussian noise to a prompt's embedding and resampling it repeatedly, with no gradient computation and no weight modification, achieves a 100% jailbreak rate on all 100 JailbreakBench prompts across six open-weight LLMs, with the first successful jailbreak typically arriving within one minute and at lower compute cost than the compared prior methods.