Open Source LLM Tool Sniffs Out Python Zero-Days

Protect AI released Vulnhuntr, a free open-source static code analyzer that leverages Anthropic's Claude LLM and prompt-engineering to discover zero-day vulnerabilities in Python projects. The tool breaks code into smaller chunks to analyze call chains across files and generates detailed analyses and proof-of-concept exploits; it focuses on remotely exploitable issues (AFO, LFI, SSRF, XSS, IDOR, SQLi, RCE) and has already found multiple zero-days in popular GitHub projects, including a reported RCE in Ragflow that was fixed.