Open-weight AI models are catching up to the frontier. The safety gap remains.
A report from SaferAI indicates that China's open-weight model GLM-5.2 is nearing the performance of top frontier AI models. However, the study highlights a critical safety gap, as open-weight models lack the API-level safeguards used by companies like OpenAI and Anthropic to prevent misuse.
Why it matters
The rapid advancement of open-weight AI models poses significant security risks, as these models can be modified by users to bypass safety protocols for malicious purposes.
As policymakers debate how to govern increasingly powerful AI systems like OpenAI’s GPT-5.6 Sol and Anthropic’s Mythos, a Chinese open-weight model has narrowed the gap with the industry’s leaders.
GLM-5.2, the open-weight AI model from China’s Z.ai, is only a few months behind OpenAI’s GPT-5.5 and Anthropic’s Claude Opus 4.7 on cyber and bio capabilities, according to a new report from AI safety nonprofit SaferAI. But the divide between frontier capabilities and safety practices is growing.
According to SaferAI’s evaluation, which the nonprofit ran via Z.ai’s public API, GLM-5.2 refused none of the offensive cyber or dual-use biology tasks it was given. By comparison, Claude Opus 4.7 “refused so consistently that SaferAI could not complete CyberGym on it at all.” (CyberGym is a benchmark that evaluates cybersecurity capabilities. OpenAI used it in the evaluation that preceded last month’s Hugging Face breach .)
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in