GLM-5.3 Finds Cursor Flaw, Triggers $10B Rule [2026]

Z.ai spent August rolling out GLM-5.3, its latest open-weight coding model, expecting the story to be about faster agents and cheaper tokens. Instead the headline turned into something else: the model reportedly found a serious security flaw in Cursor, the AI code editor SpaceX bought for $60 billion just weeks earlier. More than a month later, on September 18, 2026, the fallout is still shaping how the industry talks about AI models that can hunt for bugs on their own.