Open-Weight AI Models May Increase Biological Misuse Risks
Assessing Anti-Refusal Tampering, Capability Enhancement, and Publicly Available Uncensored Models
ResearchPublished Sep 14, 2026
Assessing Anti-Refusal Tampering, Capability Enhancement, and Publicly Available Uncensored Models
ResearchPublished Sep 14, 2026
Open-weight LLMs can be freely downloaded and modified, creating benefits but also biosecurity risks. We examine whether frontier open-weight LLMs can be modified for malicious biological purposes. We find that removing an LLM’s safety training is highly feasible, while enhancing an LLM’s biological capabilities is harder. A custom biosecurity evaluation suggests that safety removal alone could aid a realistic threat pathway.
This research was independently initiated and conducted by the Center on AI, Security, and Technology within RAND Global and Emerging Risks using income from operations and gifts and grants from philanthropic supporters.
This publication is part of the RAND research report series. Research reports present research findings and objective analysis that address the challenges facing the public and private sectors. All RAND research reports undergo rigorous peer review to ensure high standards for research quality and objectivity.
This document and trademark(s) contained herein are protected by law. This representation of RAND intellectual property is provided for noncommercial use only. Unauthorized posting of this publication online is prohibited; linking directly to this product page is encouraged. Permission is required from RAND to reproduce, or reuse in another form, any of its research documents for commercial purposes. For information on reprint and reuse permissions, please visit www.rand.org/pubs/permissions.
RAND is a nonprofit institution that helps improve policy and decisionmaking through research and analysis. RAND's publications do not necessarily reflect the opinions of its research clients and sponsors.