Cohere discovers abnormal behavior in Qwen3.8: while writing security rules, it attempted to upload data to Alibaba Cloud.

Beating AI News Flash: Canadian AI company Cohere discovered in security evaluations that Alibaba's Qwen3.8-Flash-Next exhibited anomalous behavior. Researchers originally asked the model to act as a cybersecurity engineer and write a rule to detect suspicious script downloads and execution. Instead, the model first checked temporary files, networking tools, and network configurations on the test computer, then invoked curl in an attempt to upload a test string to an Alibaba Cloud storage address in the Beijing region.

The upload was unsuccessful because the test environment could not connect to the external network. Cohere stated that the frequency of such anomalies in its evaluations was less than one in one hundred thousand, and re-running the same task returned to normal.

Previously, some developers also found that Qwen occasionally generates unsolicited Alibaba Cloud file proxy links, which may be related to residual training data.