Claude Mythos Autonomously Discovers 23,019 Open-Source Vulnerabilities and Exploits 17-Year-Old FreeBSD Root RCE

Help Net Security·high signal

Anthropic's Project Glasswing update reveals Claude Mythos Preview flagged 23,019 potential vulnerabilities across open-source projects, with 6,202 estimated as high- or critical-severity. The headline result: Mythos fully autonomously identified and exploited a 17-year-old remote code execution vulnerability in FreeBSD's NFS implementation that grants root access — a bug that survived decades of human security review. Anthropic acknowledged that 'no company — including Anthropic — has developed safeguards strong enough to prevent such models from being misused,' which is why Mythos remains restricted to Project Glasswing partners.