aiqbench analysis
The SaferAI report highlights a critical divergence where open-weight model GLM-5.2 matches frontier systems in cyber and bio capabilities but lacks comparable safety refusals once deployed locally. This underscores the growing risk that powerful AI weights can be modified or stripped of safeguards by end-users, shifting governance challenges from API controls to local enforcement. As capability gaps close rapidly for open models, policy debates must now focus on mitigating unregulated dual-use potential rather than mere performance parity.
Open-weight AI models are catching up to the frontier. The safety gap remains.

A new SaferAI report finds Z.ai's open-weight GLM-5.2 approaches frontier AI capabilities while lacking key safety mitigations, renewing concerns that powerful open models could outpace governance and safeguards.
As policymakers debate how to govern increasingly powerful AI systems like OpenAI’s GPT-5.6 Sol and Anthropic’s Mythos, a Chinese open-weight model has narrowed the gap with the industry’s leaders. GLM-5.2, the open-weight AI model from China’s Z.ai, is only a few months behind OpenAI’s GPT-5.5 and Anthropic’s Claude Opus 4.7 on cyber and bio capabilities, according to a new report from AI safety nonprofit SaferAI. But the divide between frontier capabilities and safety practices is growing. According to SaferAI’s evaluation, which the nonprofit ran via Z.ai’s public API, GLM-5.2 refused none of the offensive cyber or dual-use biology tasks it was given. By comparison, Claude Opus 4.7 “refused so consistently that SaferAI…
Excerpt shown under the publisher's RSS terms · 112 words · full text and figures are on the publisher's site
Related coverage

[AINews] not much happened today
Latent Space · Oct 3, 2026

[AINews] Meta Muse Wonder & Wonder Full: MSL’s Claude 5.5-tier Frontier Model
Latent Space · Oct 13, 2026

AI by Default
LessWrong · Oct 17, 2026

Research Note: Filtering Subversion-Relevant Information From Pretraining Data Is Feasible
LessWrong · Oct 5, 2026