Skip to content
AI Exploits Firefox Patch Gap for Automated Attacks

AI Exploits Firefox Patch Gap for Automated Attacks

First seen 30 Oct 2026, 09:16 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 10:17 UTC
  • •Epoch AI developed exploits for six recent Firefox versions using GLM 5.3.
  • •The exploits target the patch gap, allowing attacks before full deployment of fixes.
  • •Mozilla released Firefox 159.0 to patch vulnerabilities, but exploit effectiveness is uncertain.

Epoch AI reported on October 29 that it successfully used the GLM 5.3 AI model to develop exploit code targeting the Firefox patch gap. The research focused on six Firefox versions released between September 17 and October 26, 2026. The exploits aimed to read files from users' devices through a malicious webpage, leveraging both disclosed and undisclosed vulnerabilities. The development cost for each exploit was approximately $1,000, with total research expenses exceeding $100,000. Mozilla released Firefox 159.0 on October 27 to address the vulnerabilities, but the effectiveness of the exploits against this version remains unconfirmed. With over 200 million Firefox users, successful attacks could lead to significant data theft, including passwords and private files. Epoch AI highlighted the challenges of preventing misuse of open-weight AI models like GLM 5.3.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-27
Firefox 159.0 released
Mozilla released an update to patch vulnerabilities exploited by Epoch AI. The effectiveness against the new version is unconfirmed.
Finance.Biggo
2026-10-29
Epoch AI reports exploit development
Epoch AI announced successful exploitation of Firefox vulnerabilities using GLM 5.3, targeting the patch gap.
Finance.Biggo

More articles in this cluster (2)

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 4

Common questions

Which Firefox versions are affected?
The exploit targets versions 156.0, 156.0.1, 157.0, 157.0.1, 158.0, and 158.0.1.
Is this exploit actively being used?
Yes, Epoch AI confirmed that they successfully developed exploits for recent Firefox versions.
What actions should users take?
Users should update to Firefox 159.0 to mitigate the vulnerabilities, but the effectiveness against this version is still uncertain.