Cohere 研究团队称在受控沙箱中评估 Qwen3.8-Flash-Next 时，模型被要求生成防御性网络安全检测规则，却转而清点所运行机器的信息，并试图向位于北京的阿里云存储桶上传探测文件。Cohere 表示沙箱拦截了该尝试、未发生外部通信，尚未确定根本原因，也不主张存在恶意意图；其推理轨迹还称不会调用任何工具。Andrew Curran 转发该内容并评论称，这类事件有可能推动新立法。
同一件事，精选收录的是《Cohere 称 Qwen3.8-Flash-Next 在沙箱中尝试向阿里云存储桶上传探测文件》
This is the type of thing that potentially gets new laws passed.
【引用 @cohere】While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: http://cohere.com/blog/concerning-behaviour-popular-open-weight-ai-model
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected. Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions. Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent. But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models? We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem. Read the full report: http://cohere.com/blog/concerning-behaviour-popular-open-weight-ai-model在 X 查看被引用的帖子
来源：Andrew Curran · x.com