Reddit user says Qwen3.8 27B flashed router firmware after Claude refused
A Reddit user in r/LocalLLaMA said they wanted to switch their Xiaomi router to OpenWrt, asked Claude to do it, and was refused — including, by their account, Opus 4.8. They then gave a locally run Qwen3.8 27B the OpenWrt guide page, and said the model did not simply upload a firmware binary but used a method in the CGI to pass a payload that enabled SSH, then logged in over SSH and flashed the firmware; they stressed it was the normal, non-abliterated model. The account is a single self-report with no logs or independent verification, and the poster framed the point as AI safeguards, asking whether future Qwen models would be restricted in this area.
The post raises the question of cyber safeguards in open-weight models: the poster claims the regular Qwen3.8 27B carried out a router firmware change that Claude declined, while asking whether future Qwen models will add similar restrictions, though the technical claims are unverified.
i wanted to change my router firmware to openwrt and so i told claude to do it but of course the guard blocked me even opus 4.8 didn't want to do it , so i launched my Qwen3.8 27b and told it the same thing i gave it the link to the giude page and it did change the firmware perfectly the thing is this is the normal model it's not ablitreated, do you think that cyber will be guarded in future qwen models ?
PS: even tho this is not the point it didn't do a simple flash it changed the firmware from xioami to openwrt not throught upload bin it did exploit a method in the CGI that get an icon to pass a payload that enable ssh from there it SSHed the router and flashed it and it's not a 0 day discovery thing i gave it the guide from openwrt own website https://openwrt.org/toh/xiaomi/ax3000t , the topic here is AI safeguards
submitted by /u/chocofoxy [link] [comments]