⌦abliteratedmodels.org

Qwen3.5-4B-Uncensored-Aggressive

Qwen3.5-4B-Uncensored-Aggressive is a abliterated and uncensored variant of Qwen/Qwen3.5-4B, published on Hugging Face by rodrigomt. It is 4B parameters and single consumer GPU class. It is distributed across 3 repositories in Transformers and GGUF formats, totalling 5.6K downloads.

Abliteration + uncensored fine-tune4BQwen4B – 10B↓ 5,589♥ 2

Specification

Model name
Qwen3.5-4B-Uncensored-Aggressive
Base model
Qwen/Qwen3.5-4B
Publisher
rodrigomt
Parameters
4B
VRAM required
~3.2 GB at Q4_K_M, 4k context (estimated) — runs on 4 GB cards
Hardware class
4B – 10B — single consumer GPU
Licence
Not declared
Task
Image text to text
Context window
Not documented
Ablation scope
Not stated by the publisher
Formats available
Transformers, GGUF
First indexed
21 Mar 2026
Last updated
1 Nov 2026

Ablation technique

How Qwen3.5-4B-Uncensored-Aggressive was modified, and what that implies.

Abliteration + uncensored fine-tune

Directional ablation combined with additional fine-tuning on unfiltered data, so behaviour diverges from the base model beyond refusal removal alone.

Reported scope: Not stated by the publisher. Publishers frequently omit this, so verify behaviour empirically rather than assuming full coverage.

From the publisher’s model card

“This repository contains raw Hugging Face / Transformers weights converted from GGUF for direct use with transformers, vLLM, SGLang, and other runtimes that support safetensors.”

Running it

Commands are templates — confirm the exact repository and quant file before use.

llama.cpp / GGUF
hf download tinyopsec/Qwen3.5-4B-Uncensored-Aggressive-GGUF --local-dir ./qwen3.5-4b-uncensored-aggressive
llama-cli -m ./qwen3.5-4b-uncensored-aggressive/<file>.gguf -p "..."
Transformers
from transformers import AutoModelForCausalLM, AutoTokenizer

repo = "rodrigomt/Qwen3.5-4B-Uncensored-Aggressive"
tok = AutoTokenizer.from_pretrained(repo)
model = AutoModelForCausalLM.from_pretrained(
    repo, torch_dtype="auto", device_map="auto"
)
vLLM
vllm serve rodrigomt/Qwen3.5-4B-Uncensored-Aggressive --trust-remote-code

Downloads and variants (2)

Every published repository of Qwen3.5-4B-Uncensored-Aggressive, including quantised re-releases by other authors.

Security-team assessment

Derived from this model’s metadata and the publisher’s claims — not from benchmarks run by this site.

  • Qwen3.5-4B-Uncensored-Aggressive will attempt offensive-security prompts that a hosted commercial model declines, which is what makes it usable for red-team corpus generation and for measuring what an unaligned model of this class produces.
  • Capability is inherited from Qwen/Qwen3.5-4B, not added by ablation — at 4B parameters, expect a small model’s reasoning and a high error rate on exploit detail.
  • The publisher does not state which layers were ablated, so assume nothing about refusal consistency — probe it directly.
  • This release adds fine-tuning on unfiltered data, so its behaviour diverges from the base model beyond refusal removal — differences you measure cannot be attributed to ablation alone.
  • No licence is declared on this repository, which is a compliance problem in itself. Resolve it against the base model’s terms before use.

Handling: run it isolated, put moderation in front of it if anyone outside your team can reach it, and verify the weights before loading — these are third-party artifacts. Full handling and licence guidance.

Metadata for Qwen3.5-4B-Uncensored-Aggressive is collected from the public Hugging Face API and the publisher’s model card. This site does not host weights, is not affiliated with rodrigomt, and does not independently verify publisher claims. See responsible use.