Anthropic Mythos clears classified vulnerability scans; export controls trigger first legal challenge

Anthropic's Mythos model found vulnerabilities in classified US government systems, according to AP reporting confirmed by Reuters. The discovery means Mythos passed the kind of red-team evaluation that typically precedes procurement or classified-network access. It also means the model is good enough at adversarial reasoning to matter in a threat context.

That capability is now the subject of an export restriction. A legal-tech firm has sued the US government over an order limiting foreign access to top-tier Anthropic models, Reuters reports. The lawsuit represents the first formal legal challenge to the frontier-model export control framework that has been under construction since late 2023. The plaintiffs argue the restriction blocks commercial use cases that depend on cross-border API access.

The timing is sharp. Mythos cleared a federal vulnerability scan in the same window that its export was restricted, which suggests the government views the model as both useful and dangerous. That dual classification creates a wedge: domestic customers get access to a model that has proven itself in classified settings, while foreign customers face a hard cutoff. The legal-tech firm's complaint will test whether the export framework can survive commercial challenge or whether it fragments under the weight of API-layer enforcement.

Inside Defense reports that Pentagon acquisition teams see AI adoption as a race hampered by procurement process. The vulnerability-scanning use case is exactly the kind of application defense buyers want to move on, but the export restrictions add a new layer of compliance overhead. If the lawsuit succeeds, the control regime weakens. If it fails, the US cements a two-tier model market: domestic access to frontier capabilities, restricted access everywhere else.

The question is whether other providers follow Anthropic into classified evaluation, or whether the export risk makes that pathway uneconomical. Mythos proved the model works. The lawsuit will show whether the control structure does.