There was a link in another thread on HN yesterday to this:

https://www.crowdstrike.com/en-us/blog/crowdstrike-researche...

That's about Deepseek, I would expect every model out there, closed or open to have tricks on board like that. If you run a model without safeguards in place you have essentially RCE'd yourself.