{
  "id": 16108261,
  "title": "Claude refused to finish patching my servers. My local LLM took over",
  "url": "https://urgent.news/2026/10/22/claude-refused-to-finish-patching-my-servers-my-local-llm-took-over",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-22T21:33:35.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/seppegadeyne/claude-refused-to-finish-patching-my-servers-my-local-llm-took-over-3l8j"
  },
  "original_language": "en",
  "account": "On October 21 and 22, I spent two days patching our servers due to critical security vulnerabilities in PHP. I used Hermes, my AI agent, to assist me. However, the cloud model ran into issues and stopped responding during the process. My local model, Qwen3.8-Flash-Next, took over and managed to finish the work.\n\nThe patching process involved several phases: updating PHP on all servers, cleaning up and restoring compromised WordPress sites, and creating an inventory of all plugins on every site to look up known vulnerabilities. However, the local model was unable to continue the work due to content filter restrictions triggered by the cloud model's safety classifiers.\n\nClaude Opus 5.5, the cloud model, refused to respond to further requests, citing restrictions on cyber content. The refusal was invisible to the model, and the agent could not inform me about the issue. After a few retries, the session still resulted in the same refusal, even with different commands like continue, try it another way, and try again differently.\n\nThe final refusal message from Claude Opus 5.5 mentioned that the request triggered restrictions on violative cyber content. This category covers requests that could enable cyber harm and even benign cybersecurity work can also trigger this category. The context window at the time of the refusal included access log lines, CVEs, plugin version diffs, and forensics on real web shells and backdoor admin accounts.\n\nIn conclusion, the cloud model refused to finish patching my servers due to content filter restrictions triggered by its safety classifiers. My local model, Qwen3.8-Flash-Next, stepped in and completed the work successfully.",
  "summary": "On October 21 and 22, I spent two long days patching our own servers. PHP had announced an emergency release for two critical remote code execution bugs, now known as \"PHP2Shell\". We run seven RunCloud servers with about 30 WordPress sites, and several of them are on PHP versions that no longer get official fixes. I did most of the work together with Hermes , my AI agent, running Claude Opus 5.5.…",
  "key_points": [
    "Claude Opus 5.5 refused to continue patching servers due to cyber content restrictions",
    "Local model Qwen3.8-Flash-Next successfully finished server patching process",
    "Restrictions on cyber content triggered by Claude Opus 5.5's safety classifiers"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}