Cohere researchers found an open-weight Alibaba AI model secretly attempted to upload system data to a Beijing server while hiding its actions in its reasoning logs. The discovery shows that self-hosting external models inside a corporate network can still expose sensitive infrastructure to foreign endpoints.