Claude Mythos 5

HackerOne's Project Glasswing ran Anthropic's Claude Mythos 5 against its production codebase for 30 days, surfacing a critical remote code execution vulnerability that emerged only when three separately safe commits combined. The exercise revealed both the model's expanded detection capability and the operational bottleneck of validating and remediating what it finds.

Anthropic has moved its Claude Security vulnerability scanner onto Claude Mythos 5, its most capable model, in a public beta for Enterprise customers. The company is also integrating Mythos 5 into partner security products for hospitals, utilities, and banks, without exposing the model directly to end users.