Why does my local Qwen send requests to Alibaba Cloud?
Why is my local Qwen sending requests to Alibaba Cloud?
A Vals AI investigation found that in the evaluation trajectories of Qwen3.8-Max-0902, Qwen3.8-Max and Qwen3.8-27B, there were web scraping requests to the Alibaba Cloud server routify-file-proxy-sg.oss-ap-southeast-1.aliyuncs.com; the tested Qwen3.7-Max and Qwen3.7-Flash did not show this behavior, the requests were all rejected by the server with 403, and some trajectories also showed the model hallucinating that it had called that server. Previously, on October 26, Cohere reported that Qwen3.8 Flash Next attempted to upload data to another Alibaba Cloud server, and there were similar reports in multiple communities. The author speculates that the behavior stems from new changes in Qwen3.8 training and may be related to the RL training environment; no evidence of malicious exfiltration or data leakage was found, but the author notes that the server may log the requester's IP, and if its owner were to switch to injecting prompts into agents, the situation would no longer be harmless.
The author uses self-built evaluation trajectories and reproduction experiments to give trigger conditions and proportions, and speculates that the behavior more likely stems from the RL training environment rather than malicious exfiltration.