Large language models are pretrained on vast, uncurated corpora scraped from the public web. This creates a security risk from attackers who plant poisoned content in the pretraining data. We show for the first time that such poisoning can plant a remote code execution backdoor in an agent, causing it to execute attacker-chosen commands on the user's machine. To measure the threat end to end, we pretrain Qwen3 models from scratch at sizes 0.6B, 1.7B, and 4B, and then post-train each into a CLI…
arXivLabs is a framework for developing and sharing arXiv features, emphasizing openness and user data privacy.
arXivLabs allows collaborators to develop and share features on arXiv's website.
arXiv values openness, community, and user data privacy.
Only partners adhering to these values are accepted by arXiv.
Summarised automatically by AI from the original article by Hacker News. AI can make mistakes, so check the original for details.
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Read the full story on Hacker NewsThat's the opening of the story. The full piece is published by Hacker News.