On March 26, 2026, a configuration error at Anthropic accidentally pulled back the curtain on the most powerful AI model ever built. The leak, which exposed approximately 3,000 internal assets, confirmed the existence of Claude Mythos, a model so advanced that its creators have deemed it a systemic risk to global cybersecurity.
As of April 2026, here is the factual breakdown of the model Anthropic is currently keeping under lock and key.
A New Hierarchy: The “Capybara” Tier
Before the leak, Anthropic’s lineup consisted of three tiers: Haiku, Sonnet, and Opus. Claude Mythos introduces a fourth, ultra-high-performance tier codenamed Capybara.
According to leaked internal documents, the Capybara tier represents a “step-change” in intelligence, fueled by a rumored 10-trillion parameter architecture. This makes Mythos significantly larger and more compute-intensive than Claude Opus 4.6 (released in February 2026). In fact, Anthropic admits the model is “very expensive to serve,” suggesting that even if it were safe, the inference costs would be prohibitive for general public use.
Unprecedented Benchmarks
The data suggests that Mythos isn’t just an incremental improvement; it is a leap over existing frontier models. Key internal stats leaked include:
⭐ CyberGym Benchmark: Mythos Preview scored 83.1%, dwarfing the 66.6% scored by Opus 4.6.
⭐ Coding (SWE-bench Verified): The model achieved a score in the 80+ range, a 12–15 point improvement over current flagship models.
⭐ Graduate Reasoning (GPQA Diamond): Mythos reached the low-to-mid 80s, compared to the 70s seen in previous versions.
The “27-Year-Old Bug” and Cybersecurity Risks
The primary reason Anthropic refuses to release Mythos is its “asymmetric” advantage in offensive cybersecurity. In testing, Mythos demonstrated the ability to autonomously identify and exploit vulnerabilities that have sat dormant for decades.
One chilling example cited by Mike Krieger at the HumanX AI conference is the model’s discovery of a 27-year-old vulnerability in OpenBSD—a bug that had gone unnoticed by human researchers and automated scanners since the late 1990s. It also successfully mapped privilege escalation chains in the Linux kernel and a 16-year-old flaw in FFmpeg.
Anthropic’s internal draft blog post warns that Mythos “presages an upcoming wave of models that can exploit vulnerabilities in ways that far outpace the efforts of defenders.”
Why YouCan’tUse It (Yet)
Anthropic’s strategy for Mythos is one of “controlled defence.” Rather than a broad API release, they have launched Project Glasswing, a $100 million cyber defence initiative.
Access is currently restricted to a select group of “early-access defenders,” including:
⭐ Tech Giants: Google, Microsoft, and Nvidia.
⭐ Security Firms: CrowdStrike and Palo Alto Networks.
⭐ Financial Institutions: JPMorgan Chase.
The goal is to allow these organizations to use Mythos to find and patch software weaknesses before a model with similar capabilities is inevitably developed by malicious actors.
The Takeaway: Safety as a Competitive Edge
The legend of Claude Mythos marks a turning point in the AI arms race. For the first time, a leading AI lab has developed a product that is market-ready but deemed too powerful for the market.
By prioritizing defensive “head starts,” Anthropic is attempting to prevent a “cyber-pandemic.” Whether this strategy will hold as rivals race toward their own 10-trillion parameter models remains to be seen. For now, Mythos remains the most capable—and most feared—ghost in the machine.