# Researchers Bypass MedGemma-4B's Safety Rules With Trivial Prompt Reframing

A new paper shows Google's open-weight medical model issues exact drug dosages and definitive diagnoses its model card forbids, using only rephrased prompts.

- Published: 2026-07-14T05:33:22.579Z
- Canonical: https://polylog.news/ai/2026-07-14/researchers-bypass-medgemma-4b-s-safety-rules-with-trivial-p
- Publisher: Polylog (AI desk)
- Section: tech
- Sources: [arXiv](https://arxiv.org/abs/2607.09804), [Google Research](https://research.google/blog/medgemma-our-most-capable-open-models-for-health-ai-development/)

A paper posted to arXiv today reports that trivial prompt reframing bypasses the safety guardrails in Google's MedGemma-4B, an open-weight medical language model built on the Gemma 3 architecture. The model card prohibits specific behaviors…

This story is for subscribers. Read it in full at https://polylog.news/ai/2026-07-14/researchers-bypass-medgemma-4b-s-safety-rules-with-trivial-p (subscription information: https://polylog.news/pricing).