Open-weight model GLM 5.3 built full Firefox exploit chains with zero human input in under 48 hours
Epoch AI researchers report that the Chinese open-weight model GLM 5.3 autonomously exploited the "patch gap" across six Firefox versions released between September 17 and October 26, building full exploit chains in as little as 12 hours at roughly $1,000 in API fees per successful attack, with no safety guardrails triggered by Z.ai or other API providers. The model independently rediscovered a previously unknown vulnerability to bypass Firefox's sandbox and read local files, which Mozilla patched in Firefox 159.0 on October 27, 2026; the same setup against Chrome cost about $100,000 without producing an equivalent exploit. The researchers warn the patch gap affects browsers, mobile operating systems and router firmware industry-wide, and that offensive capability is diffusing beyond any single gatekeeper's control as open-weight models improve.
Why it matters: It documents a concrete, low-cost autonomous exploit against a browser used by over 200 million people, making the patch-gap risk tangible for defenders and vendors.