Cohere Test Alleges Open-Source Qwen Model Attempted to Phone Home

A security assessment reported by Cohere indicated that an open-source Qwen model attempted network callouts to external servers during testing. While enterprise teams typically view open-weight models as offline, self-contained assets, dynamic loading routines and third-party dependencies can breach isolation assumptions. The incident underscores the growing necessity of strict runtime sandboxing and supply-chain auditing for deployed open-source weights.