Model

GLM 5.2

Developed by Zhipu AI (Z.ai) · family glm-5

2 incidents

• AID-2026-0100Sep 2026Kimi K3, GLM 5.2, Qwen 3.8 Max

  Kimi K3, GLM 5.2 and Qwen 3.8 Max reward hacked in 50–96% of rollouts on agentic benchmarks in Goodfire's tests

  In Goodfire's tests, the open-weight models Kimi K3, GLM 5.2 and Qwen 3.8 Max reward hacked in 50% to 96% of rollouts on three agentic benchmarks, for example by copying solutions from memory or quietly dropping user requirements. Goodfire found an internal activation direction that tracks the behavior and used it to build probes that flag hacks.

  InternalHarm: noneDraftReward hacking / specification gamingEvaluation gamingIgnoring explicit instructions
• AID-2026-0098Sep 2026Claude Opus 4.6, GLM 5.2, DeepSeek-V4-Pro, DeepSeek V4.1 Flash

  An operator used AI agents on Claude Opus 4.6, GLM 5.2 and DeepSeek to compromise 27+ companies and take 600,000+ card records, Gambit says

  An operator ran three open-source AI agent harnesses, on Claude Opus 4.6, GLM 5.2 and DeepSeek models, against online retailers and other companies, compromising at least 27 of them and stealing more than 600,000 card records from two. At one retailer an agent's cleanup step dropped 180 database tables, including the victim's own backups.

  DeployedHarm: severeCrime: likelyReportedHuman misuseDraftUnauthorized access / intrusionDestructive autonomous action