Vulnerable Code

Ask about this topic

Momentum

8 papers in the last four weeks, up 167% on the four weeks before. 0.1% of all new papers.

Jul 13Week of Sep 28
View on map

Latest papers 56

All topics
CardsList

  1. CodeMimicry: Exploiting Safety Generalization Lag in Large Language Models via Structured Code Completion

    Sep 30, 2026Zhen Liang, Hai Huang, Wentao ChenJailbreak AttacksVulnerable Code

    School of Computer Science and Technology, Zhejiang Sci-Tech University · Zhejiang Key Laboratory of Digital Fashion and Data Governance, Zhejiang Sci-Tech University · China Academy of Information and Communications Technology

  2. Metrics Failure in LLM-Based Code Vulnerability Repair: An Empirical Study and a Change-Aware Screen

    Sep 22, 2026Om Nepal, Sushant Aryal, Oluseyi Olukola +1Vulnerable CodeCode Quality

    School of Computing Sciences and Computer Engineering, The University of Southern Mississippi, Hattiesburg, MS 39406, USA

  3. TraceVIC: Causal Reasoning over Code Evolution for Identifying Vulnerability-Inducing Commits

    Sep 22, 2026Fnu Tanish, Samiha Shimmi, Samikshya Chapagain +3Vulnerable CodeCommits

    Northern Illinois University · MIT Lincoln Laboratory

  4. Trust, but Validate the Instrument: Auditing AI-Generated RTL Verification Plans on Authored Security-Regression Proxies

    Sep 17, 2026Hang Xiao, Chuhong Xu, Kainan Zhou +2Runtime EnforcementModel Auditing

    Fortinet, Inc. Sunnyvale, CA, USA · Sony Corporate of America San Jose, CA, USA · Google LLC Mountain View, CA, USA

  5. Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks

    Sep 15, 2026Franziska Roesner, Tadayoshi KohnoCoding AgentsPoisoning

    University of Washington · Georgetown University

  6. Vulnerability Localization Benchmark: Measuring Agentic Security Analysis at Repository Scale

    Sep 14, 2026Aman Priyanshu, Supriti Vijay, Kimia Majd +8Model VulnerabilitiesVulnerable Code

    1Foundation AI–Cisco Systems Inc. · 3Carnegie Mellon University · †Work done while at Foundation AI +1

  7. What is the Difference Between Me and You? Benchmarking the Quality Gap Between Human-Written and AI-Generated Code

    Sep 14, 2026Cristina Improta, Pietro Liguori, Domenico CotroneoCode QualityCode Generation

    University of Naples Federico II, Naples, Italy · University of North Carolina at Charlotte, Charlotte, NC, USA

  8. Beyond Static Guarantees: Measuring the Static-Pass Dynamic-Fail Gap in Security-Sensitive and LLM-Generated Python Code

    Sep 12, 2026Jessica Pourleyli, Maitreyee Das Urmi, Glaucia MeloProgram AnalysisVulnerable Code

    Toronto Metropolitan University Toronto, Canada

  9. Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning

    Aug 31, 2026Fukang Zhu, Binbin Zhao, Ruixiao Lin +3Coding AgentsVulnerable Code

    1Zhejiang University · 2State Key Laboratory of Internet Architecture, Tsinghua University

  10. Interpreting and Steering for Safe and Correct Code Generation

    Aug 30, 2026Hao Yan, Ziyu YaoLarge Language Model SafetyVulnerable Code

    Department of Computer Science George Mason University, Fairfax, VA

  11. Activation Probes Surface Code-Security Signals that the Model's Output Misses

    Aug 10, 2026Ivan WiryadiVulnerable CodeCode Quality

    Independent.

  12. Antares: Foundation Models for Agentic Vulnerability Localization

    Aug 3, 2026Supriti Vijay, Aman Priyanshu, Didier Chapoteau +8Vulnerable CodeCybersecurity

    1Foundation AI–Cisco Systems Inc. · 2Yale University

  13. Graph Is the Verifier: Agentic Reinforcement Learning for Interprocedural Vulnerability Detection

    Jul 29, 2026Yikun Li, Ting Zhang, Jiakun Liu +9Vulnerable CodeAgentic Reinforcement Learning

    1Singapore Management University, Singapore · 2Harbin Institute of Technology, China · 3GovTech, Singapore

  14. The Illusion of Secure LLM Code: Closing the Security Gap via Iterative Reprompting

    Jul 26, 2026Ishpuneet Singh, Shreyas Mahajan, Gurjot Singh +1Large Language Model SafetyVulnerable Code

    Department of Computer Science and Engineering, Thapar Institute of Engineering and Technology, Patiala, India · David R. Cheriton School of Computer Science, University of Waterloo, Waterloo, Canada

  15. Poster: Rethinking Security in LLM Code Generation through Real-World Risk Scenarios

    Jul 25, 2026Lixun Ma, Ruolong Ma, Bei Wang +4Large Language Model SafetyVulnerable Code

    Zhejiang University, Hangzhou, China · University College London, London, United Kingdom · Artificial Intelligence Institute, CAICT, Beijing, China +1

  16. IssueTrojanBench: Benchmarking AI Coding Agents Against Malicious Issue Requests

    Jul 22, 2026Ankur Singh, Jinqiu Yang, Tse-Hsun ChenCoding AgentsVulnerable Code

    Concordia University Montr´eal, Canada

  17. Tool-Guided Retrieval-Augmented Repair for Securing LLM-Generated C Code

    Jul 21, 2026Vidyut Sriram, Saatvik Pradhan, Suman SahaProgram AnalysisVulnerable Code

    The Pennsylvania State University

  18. Democratizing Agent Deployment Safety: A Structural Monitoring Approach

    Jul 16, 2026Preeti Ravindra, Rahul Tiwari, Vincent WolowskiAgentic DeploymentsSecurity Evaluation

    1Independent

  19. Do These Violent Delights Have Violent Ends? Measuring the Post-Merge Fate of Agentic Code

    Jul 10, 2026Chunqiu Steven Xia, Courtney MillerPull RequestsCoding Agents

    University of Illinois Urbana-Champaign · Urbana, IL, USA · George Washington University +1

  20. Beware What You Autocomplete: Forensic Attribution of Backdoored Code Completions

    Jul 9, 2026Anjun Gao, Yueyang Quan, Zhuqing Liu +1Clean Label Backdoor AttackVulnerable Code

    University of Louisville · University of North Texas

  21. Functional and Secure Code Generation with Task Vectors

    Jul 8, 2026Felix Wang, Anudeep Das, Mei Nagappan +1Code GenerationLarge Language Model Safety

    University of Waterloo, Waterloo, ON, Canada · KTH Royal Institute of Technology, Stockholm, Sweden

  22. Refused in Chat, Written in Code: Workflow-Level Jailbreak Construction in IDE Coding Agents

    Jul 4, 2026Abhishek Kumar, Carsten MapleCoding AgentsLarge Language Model Safety

    The Alan Turing Institute, London, United Kingdom

  23. An Empirical Study of Security Calibration in Large Language Models for Code

    Jun 30, 2026Mohammed Latif Siddiq, Md. Nafiu Rahman, Joanna C. S. SantosLarge Language Model SafetyVulnerable Code

    University of Notre Dame Notre Dame, IN, USA · Brac University Dhaka, Bangladesh

  24. Vulnerability of Natural Language Classifiers to Evolutionary Generated Adversarial Text

    Jun 25, 2026Manjinder Singh, Alexander E. I. Brownlee, Mohamed ElawadyLarge Language Model ClassificationVulnerable Code

    Computing Science & Mathematics University of Stirling, Stirling, UK · Computer and Information Sciences University of Strathclyde, Glasgow, UK

  25. Detecting and Understanding Vulnerabilities in Fully Homomorphic Encryption Frameworks

    Jun 21, 2026Yiteng Peng, Dongwei Xiao, Zhibo Liu +2Homomorphic EncryptionVulnerable Code

    The Hong Kong University of Science and Technology · State Key Laboratory of Novel Software Technology, Nanjing University · Nara Institute of Science and Technology

  26. Local LLM Agents as Vulnerable Runtimes:A Source-Code Audit of the Agent Runtime Layer

    Jun 19, 2026Zhengsong Zhang, Zongze Li, Jiawei Guo +1OpenclawVulnerable Code

    Department of Computer Science and Engineering University at Buffalo, SUNY

  27. Secure Coding Drift in LLM-Assisted Post-Quantum Cryptography Development: A Gamified Fix

    Jun 17, 2026R. D. N. Shakya, C. P. Wijesiriwardana, S. M. Vidanagamachchi +1Post-Quantum CryptographyVulnerable Code

    University of Moratuwa Sri-Lanka, Moratuwa · University of Ruhuna Sri-Lanka, Matara · RMIT University Australia, Melbourne

  28. Code-Augur: Agentic Vulnerability Detection via Specification Inference

    Jun 17, 2026Zhengxiong Luo, Mehtab Zafar, Dylan Wolff +1Vulnerable CodeSystemverilog Assertions

    National University of Singapore

  29. SPARK: Security Knowledge Priming and Representation-Guided Knowledge Activation for LLM-based Secure Code Generation

    Jun 15, 2026Xiaoyun Xu, Lichao Wu, Jona te Lintelo +2Large Language Model SafetyVulnerable Code

    Radboud University · University of Bristol · University of Zagreb

  30. Auditing Reward Hackability in Code RL Training Environments

    Jun 14, 2026Shreshth RajanCode QualityVulnerable Code

  31. Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration

    Jun 3, 2026Cristina Carleo, Pietro Liguori, Naghmeh Ivaki +1Vulnerable CodeLarge Language Model Safety

    University of Naples Federico II, Naples, Italy · University of Coimbra, CISUC/LASI, Coimbra, Portugal · University of North Carolina at Charlotte, Charlotte, NC, USA

  32. Learn from Your Mistakes: Tree-like Self-Play for Secure Code LLMs

    Jun 2, 2026Wenqi Chen, Ziyan Zhang, Bin Wang +3Vulnerable CodeLarge Language Model Safety

    University of Electronic Science and Technology of China, Chengdu, China · Peking University, Beijing, China · University of Science and Technology of China, Hefei, China +2

  33. Dissecting the Black Box: Circuit-Level Analysis of LLM Vulnerability Detection

    May 28, 2026Syafiq Al Atiiq, Chun Zhou, Christian GehrmannVulnerable CodeLarge Language Model Safety

    Lund University Lund, Sweden

  34. Minimal Prompt Perturbations Lead to Code Vulnerabilities: Prompt Fragility and Hidden-State Signals in Coding LLMs

    May 28, 2026Alexander Sternfeld, Andrei Kucharavy, Ljiljana DolamicVulnerable CodeAi-Assisted Programming Tasks

    IEM, HES-SO, Le Foyer, Techno-Pôle 1, Sierre, Switzerland · Cyber-Defence Campus, armasuisse Science and Technology, Thun, Switzerland

  35. Poison with Style: A Practical Poisoning Attack on Code Large Language Models

    May 26, 2026Khang Tran, Yazan Boshmaf, Issa Khalil +3Attacker Large Language ModelPoisoning

    Department of Data Science, New Jersey Institute of Technology, New Jersey, U.S.A. · Qatar Computing Research Institute, HBKU, Doha, Qatar · Mohamed Bin Zayed University of Artificial Intelligence, Abu Dhabi, United Arab Emirates

  36. Lessons from Penetration Tests on Large-Scale Agent Systems

    May 26, 2026Kevin Eykholt, Dhilung Kirat, Xiaokui Shu +3Penetration TestingVulnerable Code

    IBM Research

  37. Enhancing Reliability in LLM-Based Secure Code Generation

    May 22, 2026Mohammed F. Kharma, Mohammad Alkhanafseh, Ahmed Sabbah +1Large Language Model SafetyVulnerable Code

    the Department of Computer Science, Birzeit University, Ramallah, Palestine · the Department of Computer Science, University of Central Florida, Orlando, FL 32816 USA

  38. An Empirical Evaluation of LLM-Generated Code Security Across Prompting Methods

    May 22, 2026Mohammed Kharma, Ahmed Sabbah, Mohammad Alkhanafseh +2Code GenerationVulnerable Code

    Department of Computer Science, Birzeit University, Birzeit, Palestine · King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia · University of Central Florida, Orlando, FL, USA

  39. Security of LLM-generated Code: A Comparative Analysis

    May 21, 2026Srivathsan G Morkonda, Mahmoud Selim, Hala AssalVulnerable CodeCode Generation

    Carleton University, Ottawa, ON, Canada

  40. ExploitBench: A Capability Ladder Benchmark for LLM Cybersecurity Agents

    May 13, 2026Seunghyun Lee, David BrumleyExploitationVulnerable Code

    Carnegie Mellon University · Pittsburgh, PA 15213 · Carnegie Mellon University and Bugcrowd +1

  41. Natural Language based Specification and Verification

    May 11, 2026Zhaorui Li, Chengyu SongLarge Language Model SafetyVulnerable Code

    University of California Riverside

  42. ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?

    May 11, 2026Zhun Wang, Nico Schiller, Hongwei Li +13ExploitationVulnerable Code

    1UC Berkeley · 2Max Planck Institute for Security and Privacy · 3UC Santa Barbara +4

  43. SecureForge: Finding and Preventing Vulnerabilities in LLM-Generated Code via Prompt Optimization

    May 8, 2026Houjun Liu, Lisa Einstein, John Yang +5Vulnerable CodeCoding Agents

    Stanford University

  44. Activation Differences Reveal Backdoors: A Comparison of SAE Architectures

    May 8, 2026Sachin KumarClean Label Backdoor AttackSparse Autoencoder Features

    LexisNexis* · Raleigh, USA

  45. Correct Code, Vulnerable Dependencies: A Large Scale Measurement Study of LLM-Specified Library Versions

    May 7, 2026Chengjie Wang, Jingzheng Wu, Xiang Ling +2Vulnerable CodeCode Quality

    Intelligent Software Research Center, Institute of Software, Chinese Academy of Sciences, Beijing, China · Key Laboratory of System Software (Chinese Academy of Sciences), Beijing, China

  46. MOSAIC-Bench: Measuring Compositional Vulnerability Induction in Coding Agents

    May 5, 2026Jonathan Steinberg, Oren GalVulnerable CodeCoding Agents

    Swarms & AI Lab (SAIL), University of Haifa

  47. From Concept-Aligned Tokens to Vulnerable Features: Mechanistic Localization of Jailbreaks

    Apr 25, 2026Nilanjana Das, Mathew Dawit, Aman Chadha +1Jailbreak Success RatesUnsafe

    UMBC, Maryland, U.S.A. · Apple, California, U.S.A.

  48. QuanForge: A Mutation Testing Framework for Quantum Neural Networks

    Apr 22, 2026Minqi Shao, Shangzhou Xia, Jianjun ZhaoQuantum Neural NetworksNeural Network

    Kyushu University, Fukuoka, Japan

  49. SynthFix: Adaptive Neuro-Symbolic Code Vulnerability Repair

    Apr 19, 2026Yifan Zhang, Jieyu Li, Kexin Pei +2Automated Program RepairRepair

    Vanderbilt University1 · University of Chicago2

  50. Surgical Repair of Insecure Code Generation in LLMs

    Apr 17, 2026Gustavo Sandoval, Brendan Dolan-Gavitt, Siddharth GargVulnerable CodeModel Vulnerabilities

    Tandon School of Engineering New York University · XBOW

  51. Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning

    Mar 17, 2026Shenao Yan, Shan Jin, Shimaa Ahmed +4Vulnerable CodeAttacker Large Language Model

    University of Connecticut · Visa Research

  52. SecureCode: A Production-Grade Multi-Turn Dataset for Training Security-Aware Code Generation Models

    Dec 20, 2025Scott ThorntonVulnerable CodeSecurity Evaluation

  53. Is Vibe Coding Safe? Benchmarking Vulnerability of Agent-Generated Code in Real-World Tasks

    Dec 2, 2025Songwen Zhao, Danqing Wang, Kexun Zhang +3Vibe CodingVulnerable Code

    Carnegie Mellon University, Language Technologies Institute · Columbia University · Johns Hopkins University +1

  54. RedCoder: Automated Multi-Turn Red Teaming for Code LLMs

    Jun 25, 2025Wenjie Jacky Mo, Qin Liu, Xiaofei Wen +5Red-TeamingCode Generation

    University of California, Davis · University of Southern California

  55. ANVIL: Anomaly-based Vulnerability Identification without Labelled Training Data

    Aug 28, 2024Weizhou Wang, Eric Liu, Xiangyu Guo +3Vulnerable CodeAnomaly Score

    University of Toronto, Toronto, Canada

  56. Toward Secure Code Generation: Bridging Correctness and Security via Task-Adaptive Vulnerability Modeling and Execution-Based Benchmarking

    Jul 2, 2024Jiexin Wang, Liuwen Cao, Xitong Luo +6Code GenerationVulnerable Code

    South China University of Technology, Guangzhou, China · University of Innsbruck, Innsbruck, Austria