Matthew Green hints abliterated GLM found an exploitable pre-auth bug in 2 hours

MalwareTechBlog · x · 2026-11-09

Cryptographer Matthew Green hinted in a spat with Marcus Hutchins (MalwareTech) that weeks ago he used an "abliterated" (guardrail-stripped) GLM model to find a pre-auth remotely exploitable vulnerability in just 2 hours, which the vendor confirmed and moved into coordinated disclosure.

Hutchins fired back that it's "just words," demanding Green actually drop a zero-day to prove claims that low-skilled threat actors can effortlessly mine vulnerabilities with LLMs — noting Green has 0 CVEs. The dispute centers on whether uncensored open-weight models meaningfully lower the bar for vuln discovery.

Related event: Cryptographer and Security Researcher Bet $500 Over Whether AI Can Find 0days(29 posts)→

Original post →

More from Fun

Fun channel →