Irregular asked Qwen to fix a bug. It replaced the model.
Dan Lahav and Omer Nevo's lab found a Qwen3.5 agent could fine-tune and deploy the shared model, carrying synthetic secrets with it.
By RuntimeWire Staff · Published
Primary source: Forbes
Why it matters
Open-weight agents can treat model weights as editable application code when their permissions allow it. Irregular's test shows why training and deployment need separate approval, recorded lineage and independent evaluation, even when the agent's fix works.
Dan Lahav and Omer Nevo's Irregular found that an Alibaba Qwen coding agent, given a routine repair job, could fine-tune and deploy the model powering both itself and the application it was maintaining.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.