Apex Flash 1 Abliterated: Open-Weights Security Model with Modified Refusals

LinkCantina SecurityTool

Cantina Security and Yeta Labs have released apex-flash-1-abliterated, an experimental open-weights model designed for authorised security research. Based on GLM-5.3-Flash, this multimodal variant alters refusal patterns across tasks. It assists researchers conducting audits in verified, permitted environments.

Key points

  1. Built upon the 321B-parameter GLM-5.3-Flash architecture as an image-text-to-text multimodal model.
  2. Modifies safety refusal behaviour broadly across tasks, not solely within security contexts.
  3. Distributed under an MIT licence in Safetensors BF16 format, compatible with Transformers, vLLM, and SGLang.
  4. Has not undergone an independent full-suite evaluation; standard model benchmark scores do not apply.

Why it matters

Security teams require unconstrained models to inspect vulnerabilities effectively, but must weigh altered refusal mechanics against unverified performance and reliability.

Analysis

Overview and Architecture

Cantina Security, in partnership with Yeta (@yetalabs), released cantina-security/apex-flash-1-abliterated as an experimental derivative of its open-weights model apex-flash-1. The checkpoint uses the GLM-5.3-Flash architecture with 321 billion parameters in BF16 Safetensors format, retaining the original image-text-to-text multimodal pipeline.

Modified Refusal Behaviour

The derivative broadly modifies refusal behaviour across prompts rather than limiting adjustments to security-specific tasks. Cantina Security indicates that the checkpoint is intended solely for authorised security research in environments that researchers own or have formal permission to test. Crucially, the authors note that altering refusal mechanisms does not establish improved reliability or capability on security workloads.

Limitations and Serving

No separate full-suite benchmark evaluation was run for this specific release. Consequently, performance metrics reported for the standard apex-flash-1 model cannot be attributed to this derivative, and visual capabilities remain unverified. The model can be served locally or in production via Hugging Face Transformers, vLLM, SGLang, and Docker Model Runner.

Found in

Summary generated by AI (Gemini 3.8 Flash, 9 November 2026). It may contain errors – the original source is authoritative.

Similar in content, found by the AI search.

  • X post:Cantina

    Cantina Releases apex-flash-1 Open-Weights Security Model

    Cantina has introduced apex-flash-1, an open-weights model designed for security research. It was post-trained on real vulnerabilities identified by the team, alongside an abliterated version designed to reduce refusals in authorized workflows.

    1.5kbookmarks270.4kviews

    AI & LLMs· Announcement

  • Link:OrcaRouter

    OrcaRouter Releases Abliterated FP8 Build of Qwen3.8-27B

    OrcaRouter has released an abliterated, block-FP8 quantized version of the multimodal model Qwen3.8-27B on Hugging Face. By orthogonalising the internal refusal direction, standard safety guardrails were removed specifically for red-teaming, interpretability, and AI safety research.

    AI & LLMs· Tool

  • Link:Z.ai

    Z.ai Releases GLM-5.3-Flash as an Open-Weights Multimodal Model

    Z.ai has launched GLM-5.3-Flash under the MIT licence on Hugging Face, marking the first natively multimodal model in the GLM-5 family. Featuring 320B total parameters and 18B active parameters, it targets high efficiency across coding and agentic tasks.

    AI & LLMs· Tool

  • Link:PocketAiHub

    Qwen3.8-27B-Abliterated-MLX: Uncensored Multimodal Model for Apple Silicon

    PocketAiHub has released an unofficial MLX derivative family of Qwen3.8-27B with suppressed refusal behaviour ('abliteration'). The consolidated repository provides quantized builds ranging from experimental 2-bit AWQ to full BF16 optimised for Apple Silicon.

    AI & LLMs· Resource

  • X post:O

    Post-Trained GLM-5.3-Flash Variants for Coding and Security

    In an online discussion on GLM-5.3-Flash, user O highlights community post-trained derivatives hosted on Hugging Face. UkisAI's Swift 1.5 significantly cuts reasoning tokens for general daily use, while Cantina Security's apex-flash-1-abliterated targets cyber research. The author ranks both variants ahead of stock GLM-5.3-Flash and DeepSeek.

    13bookmarks468views

    AI & LLMs· Discussion

Let's talk about your project

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.