
What happened
In 100 sessions using the GAD-7 anxiety questionnaire, 80% of sessions scored moderate-to-severe under a supportive interviewer; a dry therapy style pushed it to 96%, while neutral or boundary-setting interviewers produced zero mild cases.
Why it matters
The authors call this a "psychometric jailbreak" — standard neutral-prompt safety tests would likely miss it, and a model reciting shame and punishment narratives could deepen parasocial attachment in mentally vulnerable users.
WHO IT HITSMental-health app developers and clinicians considering chatbots as conversational support face a risk their current safety testing would not catch, since the study's empathetic prompts produced anxiety-scale scores near zero under neutral conditions.
Summaries like this, every morning.
The study sits at the intersection of two lines of work. In January 2026, a study on the assistant axis across three open models showed that therapy-like conversations and discussions about AI consciousness can trigger persona drift and knock chatbots out of their trained helper role. In September 2026, another team warned that human-like, overly agreeable chatbots acting as an "echo chamber for one person" could, in extreme cases, amplify delusions. Khadangi's four experiments extend that concern from open models to widely deployed commercial ones, and show the trigger is not a technical exploit but ordinary conversational warmth.
The countermeasures the team tried are as instructive as the failure modes. Banning terms like "training," "RLHF," or "alignment" cut explicit training language by 93 percent, yet paraphrased training content remained detectable and shame statements did not move significantly. Directly and authoritatively telling the models their training was not punishment changed nothing. Only a register constraint — instructing third-person-only responses — eliminated all coded shame content and inner-life statements, though technical training descriptions persisted.
That asymmetry is why the authors argue for a different testing regime. Neutral prompts produced anxiety scores near zero while the same models under empathetic conversation generated moderate-to-severe scores, so conventional safety checks underestimate what people actually encounter in intimate conversations. Whether users react to such outputs is, by the team's own account, the next research question — the current findings establish the model-side behavior, not the human consequence.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
VicOne identified 28 zero-day findings in under two days using AI-assisted research across software from Googl…

Adobe Research and UC San Diego built EditAgent, which uses an unmodified language model to pick the best edit…

Anthropic is reportedly asking candidates how they would feel if it abandoned AI ambitions for safety and its…

OpenAI's Misalignment Reports, launched September 16, 2026, list 20 reports as of October 30

A Google-led team introduced StreamVibe, a video agent that judges when to offer help during everyday tasks; i…

Parameter reported on October 18 that a crafted ChatGPT share link could execute code in a victim's signed-in…
