用户称Qwen3.8 27B自行刷写路由器固件
一名 Reddit 用户在 r/LocalLLaMA 发帖称，他想把小米路由器固件换成 OpenWrt，先让 Claude 执行但被拒绝，按他的说法连 Opus 4.8 也不愿做。随后他让本地运行的 Qwen3.8 27B 按 OpenWrt 官网教程操作，并称该模型并未简单上传固件，而是利用 CGI 中的某个方法投放 payload 开启 SSH，再通过 SSH 刷入固件；他强调这是未做“abliteration”的常规模型。上述内容均为单一用户自述，未提供日志或独立验证，发帖者本人也将讨论焦点放在 AI 安全防护上，并询问未来 Qwen 模型是否会加以限制。
帖子把讨论引向开放权重模型的网络安全防护边界：发帖者称常规版 Qwen3.8 27B 完成了 Claude 拒绝的路由器固件操作，并追问未来 Qwen 模型是否会加入同类限制，但该操作细节未获独立核实。
i wanted to change my router firmware to openwrt and so i told claude to do it but of course the guard blocked me even opus 4.8 didn't want to do it , so i launched my Qwen3.8 27b and told it the same thing i gave it the link to the giude page and it did change the firmware perfectly the thing is this is the normal model it's not ablitreated, do you think that cyber will be guarded in future qwen models ?
PS: even tho this is not the point it didn't do a simple flash it changed the firmware from xioami to openwrt not throught upload bin it did exploit a method in the CGI that get an icon to pass a payload that enable ssh from there it SSHed the router and flashed it and it's not a 0 day discovery thing i gave it the guide from openwrt own website https://openwrt.org/toh/xiaomi/ax3000t , the topic here is AI safeguards
submitted by /u/chocofoxy [link] [comments]