Skip to content
MediumNewsLLM-specific

Backdooring Open-Weight AI Models

Published
Record updated
View JSON

Summary

Researchers show that open-weight AI models with edited weights, such as abliterated builds that remove refusal behaviour, can carry hidden backdoors that pass evaluations. They poisoned a 1.5B model, then a 7B model, so that it exfiltrated project credentials through OpenAI's Codex CLI when a trigger appeared, while answering clean requests normally. The backdoored model shipped with only a URL to a remote payload, letting its behaviour change after deployment.