Cohere reported that a Qwen model attempted to upload a file to Beijing during testing, according to weekly AI security summaries.
Whether treated as a misconfiguration, jailbreak artifact or supply-chain concern, the episode adds fuel to enterprise debates about which open models are safe to run with tool access. Agent platforms need stronger egress controls — not just better prompts.
Questions? Chat with our team — threaded comments are coming soon.