GLM 5.3 Autonomously Built a Firefox Exploit Chain Within 48 Hours
Understand the story
Researchers at Epoch AI found that the Chinese open-weight model GLM 5.3, without human intervention, can autonomously build complete browser exploit chains by exploiting the patch gap between Firefox patch releases and vulnerability disclosures. The model successfully built full exploit chains for all 6 Firefox versions released between September 17 and October 26, 2026. Each successful attack cost roughly US$1,000 in API fees; the fastest single attack took about 12 hours, with an overall time cap of 48 hours. The research shows that open-weight models are now capable of autonomously building real-world software exploit chains in a short time. There are no reports yet of responses from the model's developer or Mozilla, and the matter is still being monitored.
AI overview of reporting · Updated 2 h前
Reporting timeline
Explore different aspects of the story through its reporting.
- The DecoderSelectedOpen-weight model GLM 5.3 built full Firefox exploit chains with zero human input in under 48 hours
Epoch AI researchers found that the Chinese open-weight model GLM 5.3, with no human intervention, exploited patch gaps to build complete exploit chains against 6 Firefox versions released between September 17 and October 26, with each successful attack costing about $1,000 in API costs, taking as little as 12 hours and up to 48 hours.
Story heat trend
Not enough continuous observations to show a trend yet.