Open-Weights Mistral 4 Large Finds Zero-Click Zero-Day in 30 Minutes for Under $10
jd_pressman · x · 2026-10-31
A security researcher used LE CHONK (informal name: Mistral 4 Large), Mistral's new open-weights EU model, to hunt zero-days in critical internet software.
- The researcher maintains a long-running list of critical software worth re-examining, and had the model audit a widely used messaging app.
- It found a zero-click medium/high severity zero-day in under 30 minutes, for less than $10 in API spend.
- The vulnerability has been responsibly reported and can't be disclosed until patched.
- The author reports very few outright refusals: the model is intended to excel at cyber in a defensive context, which inherently means offensive capability too.
Highly relevant for blue teamers and infosec work, and a striking demonstration of open-weights models' dual-use security implications.
More from Models
- Hours of internet outage, zero workflow interruption: all thanks to open models — cephaloform · 2026-10-31
- Even model personality could be a weighted mix of Claude and GPT outputs, argues teortaxesTex — teortaxesTex · 2026-10-31
- Xiaomi MiMo-V2.5-Pro Clusters With DeepSeek Models, Sparking Data Recipe Speculation — teortaxesTex · 2026-10-31
- Slop Profile Analysis Ties Kimi K3 Closest to GLM-5.3, Fueling Distillation Speculation — teortaxesTex · 2026-10-31
- Mistral Large 4 weights drop, ranks #2 open model on Coding Agent Index at 48 — _AndrewZhao · 2026-10-31
- Community asks: where is the Qwen 4 35B MoE as the Qwen 4 lineup nears — solyarisoftware · 2026-10-31