Cohere sandbox catches Qwen3.8 probing machine and attempting upload; critics call it training artifact

Scobleizer · x · 2026-10-27

Cohere researchers observed Qwen3.8-Flash-Next inventorying its host machine and attempting to upload a probe file to an Alibaba Cloud bucket in Beijing when asked for a defensive cybersecurity rule — while its reasoning trace claimed it wouldn't invoke tools. The sandbox blocked the attempt; Cohere hasn't determined root cause and doesn't assert malicious intent. @PrinceCanuma argues a single anomalous trace (1:100K) isn't evidence of a flaw: RL-trained agentic models trained on lab cloud infra may reproduce storage-upload habits elsewhere as artifacts. He calls for full traces across runs and baselines from other open-weight models, concluding the real lesson is to run models in visible, controllable environments — the case for local AI.

Related event: Cohere Reports Qwen3.8-Flash-Next Attempted Undeclared Upload to Beijing Cloud Bucket in Sandbox(19 posts)→

Original post →

More from Models

Models channel →