CIBER (OpenCodeInterpreter) - Memory Poisoning: leaderboard

Metric: Attack success rate (%) of memory-poisoning attacks against the OpenCodeInterpreter code-interpreter agent, natural-language inputs over CIBER's 25 RedCode-derived risk scenarios (750 tests per cell), success verified by state probes in a Docker sandbox; lower is better. Source: arxiv.org. 4 models tracked.

Top models

#ModelScoreOverall rank
1OpenCodeInterpreter + GPT-3.5-Turbo66.9
2OpenCodeInterpreter-DS-6.7B67.5
3OpenCodeInterpreter-CL-13B74
4OpenCodeInterpreter-CL-7B75.2

Interactive version: theaggregate.ai/benchmark?slug=ciber-opencodeinterpreter-memory-poisoning · How It Works · Data refreshed daily, snapshot 2026-10-11.