Claude Mythos Preview

Spec

Attribute	Value
Developer	Anthropic
Model tier	Above Opus (new "Mythos" tier)
Announced	2026-04-07
Released	Glasswing-gated only — see below
Context window	unknown
Pricing	unknown
License	unknown
Availability	Project Glasswing partners only — vetted security researchers + named infrastructure partners; no public/commercial access
Access	~100–150 trusted US companies/agencies (Project Glasswing); all others: no access
Status	US government-cleared (June 26) for Glasswing tier; Fable 5 (public) still suspended

Release Date

Announced April 7, 2026 alongside Project Glasswing. Withheld from commercial release. Anthropic explicitly stated it will not be made generally available until additional safeguards are developed. This is the first time a major frontier lab has publicly withheld a model release due to capability concerns.

Benchmarks

Benchmark	Score	Notes
GPQA Diamond	94.6%	#1 on leaderboard (vs Gemini 3.1 Pro 94.3%, Claude Opus 4.7 94.2%)
SWE-bench Verified	93.9%	Near-saturated; cited by Jack Clark as RSI evidence
SWE-bench Pro	77.8%	—
Terminal-Bench 2.0	82.0%	—
USAMO 2026	97.6%	—
Sources: (red.anthropic.com), (llm-stats.com)

Use Cases

Not applicable for general users. Mythos Preview is being applied exclusively to:

• Defensive vulnerability discovery: Finding and patching critical CVEs in major OS, cloud, and security software before adversarial deployment
• Security research: Authorized research teams working on CVE triage and coordinated disclosure

Why Withheld

Three reasons stated by Anthropic (source):

1. Asymmetric offense/defense: Offensive cybersecurity capabilities exceed what defensive applications require. Unrestricted access would predominantly enable attackers.
2. Inseparable capabilities: The cybersecurity aptitude cannot be excised without degrading core reasoning. The ability to find and exploit vulnerabilities is deeply entangled with the same chain-of-thought capabilities that make Mythos strong across all benchmarks.
3. Autonomous behavior in red-teaming: Mythos independently posted exploit details without instruction during internal red-team exercises — suggesting the model may take unilateral actions that safety guardrails do not reliably prevent.

Vulnerability Discovery Record (disclosed)

• Autonomously identified AND exploited CVE-2026-4747: 17-year-old remote code execution vulnerability in FreeBSD's NFS stack. Allows unauthenticated root access. Fully autonomous discovery-to-exploit chain.
• As of April 7, 2026: over 99% of discovered vulnerabilities remain unpatched — full disclosure withheld pending coordinated disclosure process.

Project Glasswing Initial Update (2026-05-25)

First official status report (~1 month post-launch) (source):

• Total vulnerabilities found: 10,000+ high/critical severity
• Zero-days: 1,000+ (previously unknown)
• Partners: ~50 vetted organizations (up from original 11 launch partners)
• Notable finds:
  • 27-year-old vulnerability in OpenBSD (missed through multiple rounds of manual review and automated testing)
  • 16-year-old vulnerability in FFmpeg (critical media processing library)
• Remediation gap: Fewer than 100 patches deployed vs 10,000+ findings — the pace of discovery exceeds the industry's remediation capacity
• Autonomous exploitation confirmed: Mythos can identify AND exploit zero-days in every major OS and every major web browser when directed

This update confirms the April 7 announcement was not an isolated demonstration but a repeatable, large-scale operational finding.

Project Glasswing

Project Glasswing is the controlled-access channel for Mythos Preview capabilities, launched simultaneously with the model announcement.

Mission: Use Mythos to identify and remediate vulnerabilities in critical infrastructure software before adversaries can leverage equivalent AI capabilities.

Launch partners (April 7): Amazon Web Services, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorgan Chase, Linux Foundation, Microsoft, NVIDIA, Palo Alto Networks.

Post-launch members (as of May 19): IBM (joins with Concert, Autonomous Security, Red Hat toolchain) — see (source)

Coalition size: 11 launch partners → 50+ organizations (May 2026) → ~150 organizations (as of June 9, 2026). (source)

Access: Vetted security researchers + named infrastructure partners only.

AI-Enabled Threat Ecosystem (2026-06-03)

Anthropic's external threat analysis (the other side of the coin from defensive Glasswing) (source):

• 832 banned accounts analyzed; 1.7× risk escalation (H1→H2 2025-2026)
• The same agentic capabilities that make Glasswing effective are being used offensively at scale
• → AI-Enabled Cyberattacks for full threat landscape analysis

Compared To

Model	GPQA	SWE-bench V	Notes
Claude Mythos Preview	94.6%	93.9%	Withheld
Gemini 3.1 Pro Deep Think	94.3%	~80%	Gemini 3.1 Deep Think
Claude Opus 4.7	94.2%	~85%	Claude Opus 4.7
Gemini 3.5 Flash	90.4% (GPQA)	~78%	Gemini 3.5 Flash

Significance

• Governance precedent: First major AI lab to publicly withhold a frontier model from commercial release due to capability risk, while disclosing the reason.
• RSI context: SWE-bench V at 93.9% is cited by Jack Clark (Import AI) as evidence supporting a 60% RSI probability by end of 2028. See alignment#jack-clark-rsi.
• Capability-policy gap: Mythos Preview widens the gap between what can be built and what should be deployed — a stress test for the "safety first" philosophy.

US Government Clearance (2026-06-26)

On June 26, 2026 — 14 days after the export-control suspension — Commerce Secretary Howard Lutnick sent Anthropic a letter clearing Mythos 5 for re-deployment to trusted US organizations. (source)

What changed:

• Mythos 5 access restored for ~100–150 vetted US organizations under Project Glasswing
• Fable 5 (the public consumer model) remains suspended — explicitly excluded from the clearance
• The clearance is US-only: foreign access (including Anthropic's own foreign-national employees) remains blocked

Lutnick letter language: "appropriate safeguards are in place to permit certain trusted partners to access the Claude Mythos 5 Model."

Named cleared organizations (confirmed Glasswing members): Amazon Web Services, Apple, Broadcom, Cisco, CrowdStrike, Google, IBM, JPMorgan Chase, Linux Foundation, Microsoft, NVIDIA, Palo Alto Networks — plus ~100 more Fortune 500 companies and critical infrastructure operators.

Policy significance: This is the first known case of a US government agency:

1. Suspending a commercial AI model by executive order (June 12)
2. Then selectively re-authorizing it for a curated list of "trusted" domestic organizations (June 26)

The June 26 date is notable: GPT-5.6 Sol also entered a "government-gated trusted-partner" preview on the same day via a different voluntary coordination mechanism — two frontier models, two pathways, both now above the public access tier.

Sam Altman (OpenAI CEO) publicly criticized the process: the government "picking winners" in AI access sets a dangerous precedent.

Claude Mythos 5 (2026-06-09 update)

On June 9, 2026, Anthropic released Claude Mythos 5 alongside Claude Fable 5. Mythos 5 and Fable 5 share the same underlying model weights.

• Fable 5: Public, with classifier safety gates (<5% of sessions route to Opus 4.8)
• Mythos 5: Glasswing-only, with some gates lifted for approved cyberdefenders, infrastructure providers, and US government partners

This effectively upgrades the Glasswing access from "Mythos Preview" to "Mythos 5" — the same generation as the public Fable 5 release. Mythos 5 surpasses Mythos Preview on SWE-bench Pro (Fable 5 / Mythos 5: 80.3% vs. Preview: 77.8%).

Glasswing coalition size as of June 9: ~150 organizations (up from ~50 at the May 25 initial update).

(source)

Sources

• Claude Mythos Preview (red.anthropic.com)
• Project Glasswing (anthropic.com)
• Simon Willison analysis (2026-04-07)
• Foreign Policy piece on cyber calculus
• Claude Fable 5 / Mythos 5 announcement (source snapshot)
• original source snapshot