Open source LLM tool primed to sniff out Python zero-days

Protect AI announced Vulnhuntr, a free open-source tool that leverages Anthropic's Claude (and optionally OpenAI models) to trace call chains in Python code and identify zero-day vulnerabilities, producing analysis and PoC exploits with confidence scores. The tool has reportedly found multiple previously unknown issues (including LFI, XSS, SSRF, RCE) in several popular open-source projects; limitations include Python-only support, dependence on a static analyzer, non-deterministic LLM outputs, and some false positives.