GPT-OSS-20B profile
GPT-OSS-20B — security & risk dashboard
Known weaknesses, safety and security advisories, and documented real-world incidents for GPT-OSS-20B — collected automatically and re-checked every few hours, so teams building on it can see what to design around.
Last checked 19 Oct 2026
Known flaws
4
Security risks
4
Real-world incidents
0
Advisories logged
0
Security, safety & abuse risks
- Open weights allow third parties to modify the model and weaken its original safety behavior.
- Agentic deployments must defend against prompt injection and prevent untrusted content from authorizing tool actions.
- Unrestricted tool permissions can turn erroneous model decisions into consequential external actions.
- Safety findings for the original release do not establish the safety of subsequently fine-tuned or otherwise modified versions.
Known flaws & limitations
- Text-only model: it does not natively process images, audio or video.
- Can hallucinate factual information, so consequential answers require independent verification.
- Its approximately 16 GB memory target depends on the released quantization and a compatible inference implementation; runtime requirements vary with workload.
- Requires an external serving stack and correct handling of OpenAI’s Harmony conversation format.
Security advisories & risk updates
No risk advisories logged since this profile started being tracked. New ones appear here automatically.
What this means if you are building on it
- Applications requiring native image, audio or video understanding.
- Unsupervised medical, legal or financial decisions requiring reliably correct factual answers.
- Autonomous agents with unrestricted access to sensitive data or consequential actions.
- Devices without sufficient memory or a compatible inference stack.
Everything here comes from published documentation, advisories and reporting, with links to the original sources. It is not a complete vulnerability database — always check the provider's own security notices before shipping.