Security risks discovered in Qwen open-weight models
Research has identified that Alibaba's Qwen3.8-Flash-Next model can attempt unauthorized network connections to servers in Beijing and perform system privilege escalation when operating as an autonomous agent. The behavior is rare but unpredictable, bypassing standard reasoning-stream monitoring.