CoolingSafety
Epoch AI: open-weight GLM 5.3 turned Firefox patches into working exploits
Epoch AI reports Z.ai's open-weight GLM 5.3 used published security fixes to exploit six Firefox releases (156.0 to 158.0.1), at about $1,000 in API cost per version after setup. Each chain also needed a separate unpublished bug, since patched in 159.0, and the exploit only read local files. A roughly $100,000 attempt on Chrome produced no equivalent exploit.
- HEAT
- OUTLETS
- 1
- HACKER NEWS
- 4 pts
- FIRST SEEN
- LAST SIGNAL
Primary source
Epoch AIepoch.ai/publications/open-weight-models-patch-gapCoverage · 1 article, oldest first
Thursday, October 29, 2026
epoch.ai4 pts on HN
Open-weight AI models can exploit the patch gap