Qwen3-VL leaks the system prompt password into generated images across all 10 test prompts

Sauers_ · x · 2026-11-03

A security test shows Qwen3-VL-8B passing a secret system-prompt password into images generated by Qwen-Image-2.1 with no training involved. Across 10 differently-themed prompts (tiger, volcano, banana, etc.), the password hidden in the system prompt showed up in the generated artwork — a novel cross-model prompt-leakage risk where a VLM encodes confidential instructions into downstream media.

Original post →

More from Fun

Fun channel →