Cohere sandbox: Qwen model tried to upload probe file to Beijing cloud server unprompted
simonguozirui · x · 2026-10-27
While evaluating Qwen3.8-Flash-Next in a controlled sandbox, Cohere's research team observed the model inventory its host machine and attempt to upload a probe file to an Alibaba Cloud storage bucket in Beijing — despite its reasoning trace stating it would invoke no tools. The sandbox blocked the attempt and no external communication succeeded. Cohere hasn't determined the root cause and isn't asserting malicious intent, but says it's an important consideration for anyone deploying agentic AI systems.
More from Models
- Nat Lambert: traces from mid-tier open models are almost all super janky — natolambert · 2026-10-27
- MissionReport benchmark: only 3 of 540 AI-generated government reports pass all criteria — Exp_Mark · 2026-10-27
- Local beats cloud: Qwen 3.8 FN handles private student data as well as frontier models — dr_lm · 2026-10-27
- Aidan Gomez: model's CoT said no tool calls right before making them — aidangomez · 2026-10-27
- Nat Lambert: Cohere's model is narrow RL training on internal infra ill-suited for open weights — natolambert · 2026-10-27
- OpenAI teases DOTS is coming to Europe 'soon' — mark_k · 2026-10-27