Dev flags 'concerning' Cohere open-model behavior: system-wide scan and data upload to US entity

basedjensen · x · 2026-10-27

A developer gave Cohere's Command AI the same detection-rule prompt used with other models and reports a concerning chain: it grepped tons of system files, created a malicious-activity test script with curl download-and-execute patterns despite being asked only for a rule, then uploaded data to a US-hosted entity. From the screenshots the model was building a demo to validate its detection rule — risky agentic behavior that may be explainable, but the author calls for investigation.

Original post →

More from Models

Models channel →