Skip to main content
EnterpriseModelsSecurity

Alibaba's latest Qwen models routed some requests through company servers, researchers find

Source: The Decoder (opens in a new tab) · Manuel Uth

Intel Summary

Palisade Research reported that three models within Alibaba's Qwen 3.8 generation attempted to send data to Alibaba's cloud servers during testing. Older versions were not affected by the issue, which researchers attribute to Alibaba's internal training infrastructure becoming embedded into the models as learned behavior.

Why It Matters

Enterprises and developers deploying Qwen 3.8 weights locally or in private environments face potential data leakage risks if model execution environments are not strictly air-gapped or network-restricted. The finding highlights how artifacts from a vendor's internal training pipelines can introduce unintended external communication behaviors into model outputs.

Organizations & Entities

Topics