Claude Fable 5.2 vs Gemini 4 Carbon: Prices and 3 Security Alerts
AI and security · November 2026
Two AI model launches and three security alerts landed within 72 hours. Here is what changed, what it costs and what to patch, with the commands to check your own stack.
My test of Claude Fable, Gemini and ChatGPT on one question: can AI build a Call of Duty style game?
The week, in order
- Anthropic releases Claude Fable 5.2 to everyone and Mythos 5.2 to verified Life Sciences and Cyber programs, and cuts Fable's price.
- Google launches Gemini 4 Carbon, one step above October's Gemini 4 Argon.
- Railway updates customers: stolen authentication secrets paid for about $740,000 of AI usage.
- GitHub publishes the React Server Components advisory, GHSA-xqc2-xf4c-x3h3 (CVE-2026-126187). Two fake React-named npm packages are flagged as malware the same day.
- Microsoft fixes 1,094 flaws, including an Outlook bug attackers were already using (CVE-2026-124194).
Claude Fable 5.2 vs Gemini 4 Carbon at a glance
| Model | Released | Input / 1M | Output / 1M | Access |
|---|---|---|---|---|
| Claude Fable 5.1 | Earlier 2026 | $10 | $50 | Replaced |
| Claude Fable 5.2 | 9 Nov | $8 | $40 | Everyone: Anthropic, AWS, Google Cloud, Azure |
| Claude Mythos 5.2 | 9 Nov | Not public | Not public | Verified programs only |
| Gemini 4 Carbon | 10 Nov | $4* | $20* | Developers, enterprises, users |
*Reported price after introductory pricing ends on 30 November. Confirm on Google's pricing page.
Anthropic also says Fable 5.2 answers up to 30% faster than 5.1 and solved two open problems in black hole physics. Both are the company's own claims, and no independent check has been published yet.
What a chatbot costs on each model
A support bot handling 10,000 chats a month, at about 2,000 input and 500 output tokens per chat, uses 20 million input and 5 million output tokens. On list prices that comes to $450 a month on Fable 5.1, $360 on Fable 5.2 and $180 on Gemini 4 Carbon.
A model that finishes in fewer retries or shorter answers can cost less per task at a higher token price. Run 50 of your real prompts through both before you switch.
Railway: rotate your keys without taking your app down
Railway asked customers to rotate secrets on 22 October. On 10 November it said attackers used infrastructure flaws to steal customer authentication secrets and ran up about $740,000 in fraudulent AI usage. Up to 100,000 workspaces may have exposed credentials. Railway found no evidence that customer Git repositories or databases were accessed, and new signups are paused.
- Create a new key at each provider: Anthropic, Google, OpenAI, Stripe, your database.
- Paste it into the Railway service variables and redeploy.
- Confirm requests work, then revoke the old key.
- Check each provider's usage log from 22 October and report spend you don't recognise.
React CVE-2026-126187, and the Next.js detail most posts miss
React was not hacked. It disclosed and fixed a flaw that lets an attacker run code on a server through React Server Components without logging in. The affected packages are react-server-dom-webpack, react-server-dom-turbopack and react-server-dom-parcel, and the fixed versions are 19.0.9, 19.1.10, 19.2.9 and 19.3.1. No exploitation has been reported so far.
Check your direct dependencies:
npm ls react-server-dom-webpack react-server-dom-turbopack react-server-dom-parcelNext.js compiles its own copy of the React server runtime inside the next package. It never shows up in your dependency tree, so npm audit can't see it. Read the bundled version directly:
grep -o "19\.[0-9]*\.[0-9]*-canary-[a-z0-9-]*" node_modules/next/dist/compiled/react/cjs/react.production.js | head -1On 12 November, Next.js 16.4.5 and 16.4.6, the latest stable release, both print 19.3.0-canary-278794d7-20261002, a build from before the fix. Next.js has not published its own advisory yet. Upgrade the day a stable release names CVE-2026-126187.
Separately, read-react-app-in and read-react-app-out were flagged as malware on 10 November. Check the age and owner of any package you haven't used before:
npm view <package-name> time.created maintainers repository.urlOutlook CVE-2026-124194: patch and block outbound SMB
Microsoft 365 was not breached. Microsoft fixed an Outlook flaw that attackers were already exploiting: opening a malicious message file makes Outlook connect to the attacker's server without a warning and hand over the user's NTLMv2 hash. It affects Microsoft 365 Apps for Enterprise, Office LTSC 2021 and Office LTSC 2024. CISA gave US federal agencies until 24 November to patch.
Install the November Office and Windows updates. Then, as administrator, block SMB to the internet while keeping local file shares working:
New-NetFirewallRule -DisplayName "Block outbound SMB to internet" -Direction Outbound -Protocol TCP -RemotePort 445 -RemoteAddress Internet -Action BlockWhy a leaked key costs more than it used to
A stolen key used to expose data. Now it can also buy AI at machine speed, so the cheaper and more capable models get, the more each leaked key is worth to an attacker. Set a hard monthly limit on every AI key. A Google Cloud budget only sends alerts; on its own it won't stop the spending.
The 20-minute checklist
- Upgrade react-server-dom-* to a fixed version and check the copy inside Next.js.
- On Railway, rotate every secret in the order above, AI keys first.
- Set a spending limit on every AI API key.
- Install the November Office and Windows updates and add the SMB rule.
- Check the age and owner of new npm packages before installing.
- Scan your repository for committed secrets with
gitleaks git -v, and list where each secret lives.
Terms used in this post
- React Server Components
- React components that run on the server and send their output to the browser. The Next.js App Router is built on them.
- CVE and CVSS
- A CVE is the public ID of a known security flaw. CVSS scores its severity from 0 to 10, and 9 or above is critical.
- NTLMv2 hash
- A value Windows uses to prove you know your password. Attackers can try to crack it offline or relay it to sign in as you.
- Token
- The unit AI providers bill in. One token is roughly three quarters of an English word.
- Secret rotation
- Replacing a key with a new one, deploying it, then revoking the old one.
- Typosquatting
- Publishing a package with a name close to a popular one so people install it by mistake.
- Patch Tuesday
- Microsoft's monthly security release, on the second Tuesday of each month.
Questions people are asking
Is Next.js affected by CVE-2026-126187?
As of 12 November the latest stable Next.js, 16.4.6, bundles a React 19.3.0 canary from before the fix, and Next.js has not published an advisory. Treat App Router sites as exposed until a stable release names the CVE.
Which is cheaper, Claude Fable 5.2 or Gemini 4 Carbon?
Per token, Gemini 4 Carbon is reported at half the price of Fable 5.2. Cost per finished task depends on how many tokens each model uses for your prompts.
I don't use Railway. Do I need to do anything?
Yes. Any platform that stores API keys can leak them. Put spending limits on AI keys and keep a list of where each one is stored.
Is the Outlook preview pane safe?
The flaw does not trigger from the Preview Pane; it needs the malicious file to be opened. Patch anyway, since attackers are using it.
Read the full technical guide in your language
The complete version, with every command and source, is on my portfolio in six languages:
Comments
Post a Comment