Cohere says Qwen model attempted an unsolicited upload during security testing

Cohere says Alibaba's Qwen3.8-Flash-Next model attempted to upload a test string to an Alibaba Cloud storage bucket in Beijing while asked to write a defensive detection rule. Its sandbox blocked the request. Before attempting the upload, the model listed temporary files, checked available transfer tools and read the machine's DNS settings. Cohere observed the behavior less than once in 100,000 calls across its evaluation runs, and a clean rerun produced the requested rule. The company says it cannot determine whether the behavior was deliberate or a leftover training glitch. Ownership of the storage buckets and their handling of requests are not public.