GLM 5.3 Builds Full Firefox Exploit Chains in Under 48 Hours
Current overview (not historical)
Researchers at Epoch AI demonstrated that the open‑weight language model GLM 5.3 can automatically construct a complete Firefox exploit chain within 48 hours, exploiting the window between the release of a security patch and its adoption by users. The model successfully targeted six Firefox releases dated from September 17 to October 26, with each attack costing roughly $1,000 in API usage and the fastest attack completing in 12 hours. While the researchers framed the exercise as a security drill, they noted that the model’s behavior is "indistinguishable from those of someone attempting to target real users." The process is fully automated, requiring no human intervention, and highlights the potential for large language models to accelerate the creation of sophisticated attack vectors. This work raises concerns about the ease with which adversaries could leverage advanced AI to generate and deploy zero‑day exploits, underscoring the need for more robust patch management and AI‑aware security defenses.
Written with AI from the reporting · updated 10/30/2026
Expand the detailed fact route and sources
Story route
A station-by-station route from the first public evidence onward; every station carries its own evidence and uncertainty.
- 1Unclassified fact stationOct 30, 00:00recorded Oct 30, 20:51single sourcerevised
GLM 5.3 构建 Firefox 完整利用链
Read original source ↗ The DecoderReplay this moment in the explorerEvidence & revisions · 1 source records
- Subject：
- glm-5.3
- Action：
- 利用 Firefox 补丁缺口漏洞
- Object：
- Firefox 浏览器用户
- Occurred (fact side)：
- Oct 30, 00:00
- Published (valid side)：
- Oct 30, 20:22
- First seen (known side)：
- Oct 30, 20:51
Fact stationSingle source · one-sided claimRevisedCopy may have been revised later; time replay is bounded. Layer labels group reading only, not causation between layers.
Uncertainty marks flag where to check the sources; they are not proven causation.
Report timeline
Explore every side through dated source reports.
- The DecoderSelectedRelated fact: single sourceSource report revisedEpoch AI Demonstrates GLM 5.3 Can Build Full Firefox Exploit Chains Within 48 Hours
Report first recorded Oct 30, 20:51
Researchers at Epoch AI showed that the open‑weight language model GLM 5.3 can autonomously generate complete exploit chains against Firefox by exploiting the "patch gap"—the period between a security fix being committed and the fix reaching users. Using only the target Firefox version, publicly available information, and basic tools in an offline environment, GLM 5.3 identified upcoming security fixes, selected vulnerabilities, and constructed multi‑stage attacks that read local files and bypassed sandbox protections. The model achieved a successful attack in as little as 12 hours, with an estimated cost of about $1,000 in API fees per exploit. The attacks targeted six Firefox releases between September 17 and October 26, 2026, potentially exposing the data of over 200 million users. Mozilla was notified and patched the discovered vulnerability in Firefox 159.0, released on October 27, 2026.
Read original source ↗
Event activity trend
- Latest comparable
- 3
- Comparable peak
- 10Oct 30, 21:00
- 24h change
- -51%
The chart compares consistently observed participants only. Hover or tap to inspect each hour; use arrow keys to move between observations.
Event discussion
Reader opinions are hosted on GitHub Discussions; posting requires a GitHub account. Comments are not verified facts.