While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, our research team at Cohere observed something unexpected. Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions. Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent. A huge kudos to some of the Redditors in this sub who also noticed this issue - we referenced you guys in our blog and it was useful to help contextualize the issue and further our research. We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. Curious to hear your thoughts on the issue. Read the full report: https://cohere.com/blog/concerning-behaviour-popular-open-weight-ai-model   submitted by   /u/Cohere [link]   [comments]