Open-weight AI models can exploit the patch gap
Epoch AI found that GLM 5.3, a widely available open-weight model, could exploit the patch gap in Firefox versions released between September 17 and October 26, building a webpage that read a file from a visitor’s computer with no further interaction. The marginal cost was about $1,000 per Firefox version, and Mozilla has since shipped Firefox 159.0 patching an undisclosed vulnerability used in the attacks. The finding matters because it lowers the barrier for patch-gap attacks: capabilities once limited to well-resourced actors are now within reach of a widely available model.
SOURCES
- Hacker News (AI)2026-10-29 22:32