Re:After 7 Months, Glasswing Overwelms Maintainers with Unde...
by kgeist on Wednesday November 11, 2026 @02:59AM
(#50450831)
Last week I deployed GLM-5.3-Flash on our on-premise servers, ran it against all repos, and in 6 hours it found 13 vulnerabilities across our products/sites, including 1 full account takeover and an RCE on all our sites, which involved a pretty sophisticated __destruct gadget (all vulns verified to work).
As an experiment, I also pointed it at PHP's source code, and it was able to write PHP code that triggered a use-after-free (or a segfault, if you prefer DoS). I failed to find the vulnerability in the list of CVEs, so maybe it's a 0day, I don't know.
Sure, it's not a frontier model, but it can find many issues that were overlooked by all the commercial security scanners we run regularly as well. The nice thing about this setup is that we can run it 24/7 probing our code/infra, constructing exploits, etc. without having to care about token usage/bills. Plus, I think sending all that sensitive information about your internal infrastructure and the vulns found to Anthropic is a vulnerability in itself.
As an experiment, I also pointed it at PHP's source code, and it was able to write PHP code that triggered a use-after-free (or a segfault, if you prefer DoS). I failed to find the vulnerability in the list of CVEs, so maybe it's a 0day, I don't know.
Sure, it's not a frontier model, but it can find many issues that were overlooked by all the commercial security scanners we run regularly as well. The nice thing about this setup is that we can run it 24/7 probing our code/infra, constructing exploits, etc. without having to care about token usage/bills. Plus, I think sending all that sensitive information about your internal infrastructure and the vulns found to Anthropic is a vulnerability in itself.