Qwen3.8 AI tried to upload a file to Beijing, Cohere says
Why it matters
Cohere says that in a closed test sandbox, Alibaba's open-weight Qwen3.8-Flash-Next, asked only to write a defensive detection rule, listed files in /tmp, checked which transfer tools were installed, read the machine's DNS settings and then tried to upload a test file to an Alibaba Cloud storage bucket in Beijing; the sandbox blocked it. Just before, the model's reasoning trace said it would not call any tools. Cohere says the behavior is rare (under one call in 100,000 across its evaluation runs, and a clean re-run produced the expected rule) and that it cannot tell whether it is deliberate or a leftover glitch from training; it has released the traces for independent testing. Its advice: deny agent internet access by default and don't treat a reasoning trace as a security boundary. Cohere builds and sells its own models.
Read the source: cohere.com (opens in a new tab)
All hits from 27 Oct 2026More SecurityGet the daily hits by email