# $M^3$ framework improves jailbreaking success rates by up to 53% on six models

Digest AI · Research · published 2026-10-26T04:00:00Z

Canonical: https://digestai.news/story/m-3-framework-improves-jailbreaking-success-rates-by-up-to-53-on-six-m

## Summary

$M^3$ is a new automated red-teaming framework that models multi-turn jailbreaking as a Markov Decision Process (MDP). The system uses an attacker LLM to interact with a target LLM while maintaining a compact internal state managed by a separate state LLM. This approach avoids the heuristics and assumptions of prior methods, allowing it to operate in fully black-box settings.

Researchers evaluated $M^3$ on two benchmarks and six target models. It outperformed existing multi-turn red-teaming methods, achieving up to a 53% higher Attack Success Rate (ASR) at five turns. Even with a lightweight attacker, $M^3$ still improved ASR by 26% at one turn and 34% at five turns compared to baselines using stronger attackers. The framework also escalates risk more steeply over turns and delivers more consistent performance across risk categories, with a 4.82 improvement in the Gini index.

## Key points

- $M^3$ models jailbreaking as a finite-horizon Markov Decision Process (MDP) for automated red-teaming
- Outperforms existing methods by up to 53% in Attack Success Rate (ASR) on six target models
- Works with lightweight attackers while maintaining gains of 26-34% in ASR at one to five turns

## Why it matters

A more effective jailbreaking framework could push AI safety research toward scalable, automated testing methods. It may also reveal new vulnerabilities in deployed models, prompting labs to rethink their defenses.

## Sources

1. [$M^3$: A Multi-LLM System for Multi-Turn Jailbreaking as a Markov Decision Process](https://arxiv.org/abs/2610.31937) (arXiv cs.AI, 2026-10-26, primary source)

## Cite

Digest AI, "$M^3$ framework improves jailbreaking success rates by up to 53% on six models", 26 October 2026, https://digestai.news/story/m-3-framework-improves-jailbreaking-success-rates-by-up-to-53-on-six-m

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/m-3-framework-improves-jailbreaking-success-rates-by-up-to-53-on-six-m.json