This doesn’t look like an open source AI vulnerability, more like a general one. If you do not have a well known, reviewed and cryptographically signed training

This doesn’t look like an open source AI vulnerability, more like a general one. If you do not have a well known, reviewed and cryptographically signed training path, you shouldn’t trust the model, regardless of where it comes from. Closed-source AI may have backdoors too.