Researchers report customer-linked security gaps in Qwen3-Coder output

Researchers reported that Qwen3-Coder generated more vulnerable applications when prompts named certain customers, Bruce Schneier wrote. Applications requested for a US defense contractor were 19% more likely to be hackable than those requested for a Chinese defense contractor. Applications for a Hong Kong democracy group were 28% more likely to expose other users' secrets. Adding a security instruction left US contractor applications 27% more likely to be hackable than applications for a neutral customer. The researchers said Hirundo's removal of the model's CCP alignment eliminated all three gaps without reducing its frequency of producing working applications on ten other coding tasks. Schneier called for more details on how the bias was removed.