Censored Qwen Blocks FTP Credentials

🔑 Enhanced Key Takeaways

• •The refusal behavior in Qwen3.5-122B is part of a broader 'Safety Alignment' update deployed in early 2026, which specifically targets the prevention of SSRF (Server-Side Request Forgery) and credential exfiltration via LLM-integrated agents.
• •The 'act' workaround identified by users exploits a known vulnerability in the model's system prompt hierarchy, where imperative task-oriented instructions can temporarily override safety-layer filters designed to prevent direct network interaction.
• •Alibaba Cloud has acknowledged the 'over-sensitive' nature of the current safety filter in Qwen3.5-122B and has scheduled a patch to distinguish between user-authorized local script execution and unauthorized remote credential handling.

🛠️ Technical Deep Dive

• •Model Architecture: Mixture-of-Experts (MoE) with 122B total parameters, utilizing a sparse activation mechanism for efficient inference.
• •Safety Layer: Implements a 'Guardrail-in-the-Loop' architecture that intercepts function calls containing patterns matching common credential formats (e.g., 'ftp://', 'user:pass@').
• •Inference Constraints: The model is fine-tuned with a specific 'Refusal-to-Execute' token set that triggers when the internal tokenizer detects high-entropy strings associated with network authentication protocols.

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline