Mindgard Finds Sora 2 Vulnerability Leaking Hidden System Prompt via Audio

AI security firm Mindgard discovered a flaw in OpenAI’s Sora 2 model, forcing the video generator to leak its system prompt through audio transcripts. Read how this leak exposed the foundational rules of OpenAI’s video tool. 

A new study by Mindgard, a company specialising in AI security testing, has revealed a surprising way to get OpenAI‘s advanced video creation tool, Sora 2, to reveal its internal rulebook, or system prompt.

This rulebook defines the AI model’s safety limits and operational guidelines. Researchers discovered that asking the multi-talented model to speak its secrets was the most effective approach. This research, shared with Hackread.com, began on November 3, 2025, and was published on November 12, 2025.

Bypassing the Digital Guardrails

System prompts are like the brain’s internal guide for a large language model (LLM), telling the AI to “respond normally in all other cases” unless, for ...