NEWS · MODELS · #2820
Epoch AI: open-weight GLM 5.3 autonomously built full Firefox exploit chains
Epoch AI researchers found that the widely available open-weight model GLM 5.3 autonomously identified upcoming security fixes, chained vulnerabilities, and produced working Firefox exploits in under 48 hours (fastest 12 hours), at roughly $1,000 in API fees per successful attack. The team disclosed a previously unknown vulnerability to Mozilla, which was patched in Firefox 159.0; researchers say API providers did not block the model during testing and similar "patch gap" risks likely affect other software.
KEY POINTS
- Epoch AI researchers found that the widely available open-weight model GLM 5.3 autonomously identified upcoming security fixes, chained vulnerabilities, and produced working Firefox exploits in under 48 hours (fastest 12 hours), at roughly $1,000 in API fees per successful attack.
- The team disclosed a previously unknown vulnerability to Mozilla, which was patched in Firefox 159.0; researchers say API providers did not block the model during testing and similar "patch gap" risks likely affect other software.
- This shows that accessible open-weight models can rapidly and autonomously turn published code changes into real-world exploits, widening the window of risk during the "patch gap."
WHY IT MATTERS
This shows that accessible open-weight models can rapidly and autonomously turn published code changes into real-world exploits, widening the window of risk during the "patch gap."