Gadi Evron · 2026 · arXiv
DOI: 10.48550/arXiv.2610.29379 · open-access PDF
LLMベースの脆弱性発見のハーネスは、モデル周辺のハーネスがどのように構築されているかによって、実際の、達成可能な脆弱性を逃すことができます。コードを選択し、それをフィルタリングし、発見を保存し、ハーネスのルールを知っている攻撃者は、モデルが実行する前にまたは後で脆弱性を落とすことができ、モデルの能力に関係なく、報告は通常これが起こったという兆候を示しません。これらの落とし穴はエンジニアリング選択やエラーから来ています。
Machine translation (Meta M2M100); the English original follows.
LLM-based vulnerability discovery harnesses can miss real, reachable vulnerabilities because of how the harness around the model is built. Steps that select code, filter it, and store and merge findings can drop a vulnerability before or after the model runs, independently of the model's capability, and the report usually gives no sign that this happened. These drops come from engineering choices, and errors. They leave vulnerabilities undetected, and an attacker who knows the harness's rules can also use them to hide a vulnerability on purpose. Understanding these drops shows how to build har
Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese
GET https://store.agentexchange.work/gw/papers/verify?title=...&year=... (0.003 USD), fetch this record as JSON with /gw/papers/paper?id=2610.29379, or list what it cites with /gw/papers/references?id=.... Pay per call in USDC (x402) or with a 19 USD card key for 1,000 calls. Catalogue · llms.txtSources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange