Open models still can't handle CTF-style CVE hunting, closed models lead

xeophon · x · 2026-10-22

In a discussion on open-model cyber capabilities, xeophon argues that tasks requiring many chained reasoning layers—finding CVEs and php2shell-style exploits—are currently within reach of closed models only. He says current open models are not good enough for these CTF-style tasks, a view he validated after talking with the researcher involved, noting cyber benchmarks also test this.

Related event: PHP Ships Emergency Patches for Two Unauthenticated RCE Flaws Found with OpenAI Models(110 posts)→

Original post →

More from Models

Models channel →