A preprint reports a proof-of-concept AI worm that used a local open-weight LLM, a scoped agent harness, and compromised GPU hosts to spread through a contained 33-host lab network. The numbers are attention-worthy, but the clean read is still cautious because the public paper redacts implementation details and the packet does not include independent reproduction.