GLM 5.3 autonomously exploits Firefox in 48hrs for $1K
epoch ai researchers found glm 5.3 can exploit firefox with zero human input, posing patch gap risks for users.
epoch ai researchers used glm 5.3 to autonomously build full firefox exploit chains with zero human input in under 48 hours. the model identified upcoming security fixes, selected vulnerabilities, and built multi-stage exploit chains at a cost of about $1,000 in api fees per firefox version. glm 5.3 relied on a previously unknown vulnerability to bypass browser sandbox protections and read local files. the researchers disclosed their findings to mozilla, which patched the vulnerability in firefox 159.0.