Open-weight AI models can exploit the gap between published and shipped security fixes. GLM 5.3 reportedly turned published-but-unshipped Firefox fixes into working one-click exploits for six releases, at roughly $1,000 each.