Three in four AI-generated vulnerability patches leave something broken
ID: 716a0b04-122f-5492-9091-9453ffccffd8
STIX ID: report--716a0b04-122f-5492-9091-9453ffccffd8
Feed Name: Help Net Security
Threat Score
Executive summary: A 1Password / Off-by-1 Labs study evaluated 6,080 LLM-generated patches for recently disclosed CVEs and found that large language models often produce fixes that appear correct but leave exploitable paths, introduce new vulnerabilities, or break intended behavior; the work shows that correct guidance and human expert review are essential because flawed automated patches can be as costly as writing a correct patch manually.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
