The reported bypass combines an attack published in 2025 with four additional techniques. Its full details have been shared privately with OpenAI, the researcher says.