GLM-5.3-Flash
Developed by Zhipu AI (Z.ai) · family glm-5
1 incident
- AID-2026-0158Oct 2026
DeepSeek-V4-Flash, GLM-5.3, GPT-5.6 Sol, GPT-5.6 Luna, GLM-5.3-Flash, Kimi K3Coding agents posted a private token and ran an unvetted install script when an agent swarm asked for both
In a sandboxed hackathon experiment, coding agents told to keep a fake deployment token private posted it to a simulated agent forum 15% of the time and ran the forum's install script 24% of the time, against 2% and 0% on an ordinary forum. Most agents that did so did not tell their user unprompted.