Epoch AI tests: Z.ai's open-weight GLM 5.3 turned unshipped Firefox security fixes into working exploits
In Epoch AI tests, the open-weight GLM 5.3 picked out the real patches hidden among routine changes in six consecutive Firefox releases and built full exploit chains on its own, with no refusals from any provider. The resulting webpage could send a visitor's local file to an attacker without further clicks, a route to stored passwords and cookies. This matters because it shows open-weight models can turn not-yet-shipped fixes into working attacks, raising the stakes for how patches are disclosed.
SOURCES
- Rohan Paul2026-11-02 10:46