DeepSeek V4.1 Flash nearly saturates web vuln tasks, writes kernel and v8 n-day exploits
Tester says V4.1 Flash nearly saturates most web vulnerability tasks and one-shots kernel and v8 n-days, though complex exploits still trail GPT-5.6 Sol.
i want to fearmonger! there's a good chance we'll see a lot more attacks like railway and opencode. i wouldn't even be surprised if attackers are already using deepseek flash. deepseek v4.1 flash is the first open model that made me update insanely hard on the gap between open and frontier models. how the fuck is a 500b flash model this good? it seems like deepseek figured out something similar to the post-training jump from gpt-5.5 to gpt-5.6 that turned sol into a maniac hacker. its small, fast, and reasons insanely well about code. we've been benchmarking it, and it nearly saturates most web vulnerability tasks. it still can't write complex exploits like gpt-5.6 sol, things like kvm escapes, php2shell, etc. but it can write kernel exploits which are not complex, there's a recent n-day that flash one-shots, same with v8 ndays. if deepseek scales whatever they figured out with flash to v4.1 pro, i wouldn't be surprised to see sol- ike results. this thing can be abliterated and run on fairly modest gpu hardware, and they released an inference engine to blast tokens out.