DeepSeek V4.1 Flash finds 0day RCE in handlebars.js in minutes for $0.05
Thionne_WTZ · x · 2026-09-10
Developer @whoareme33 reports that DeepSeek V4.1 Flash discovered a 0day RCE in handlebars.js v4.7.9 within minutes at a cost of just $0.05. Notably, flash found it consistently, while deepseek-v4-pro-0813 needed multiple runs with the same prompt. An unverified but striking demo of cheap models doing real security research.
More from Models
- Sam Altman: average person may burn 500B tokens a month within six years — rohanpaul_ai · 2026-09-10
- Mystery Model Aliases Spotted in API: GPT-Live-1-Lava-alpha, Diamond, Platinum, Pearl Alpha — Angaisb_ · 2026-09-10
- DeepMind depth-recurrence patent fuels speculation about Gemini's next architecture — creatoroff · 2026-09-10
- Antigravity users still getting Google accounts banned despite DeepMind reassurances — steipete · 2026-09-10
- Armin Ronacher: GPT 6 Astra is impressive, but the 35-hour unattended software factory doesn't work — rseroter · 2026-09-10
- Gary Marcus flags Altman's flip-flop: wanted an AI knowing his whole life, now claims data ignorance — GaryMarcus · 2026-09-10