Findings/discovery-outpaces-patching

AI-driven vulnerability discovery produces reports faster than maintainers can triage and patch them.

Corroboratedreported2 evidence records from 2 independent sourcesassistant-drafted

Scope: what this does not show

One lab's program data and maintainers' reports; no systematic measurement.

Corroborated: Supported by at least two independent sources.

Evidence

May 18, 2026

Maintainers report AI-generated vulnerability reports overwhelming kernel and bounty triage

Linux kernel mailing list

Complaints centre on duplicate and low-quality AI-assisted reports straining triage.

May 22, 2026

Glasswing update: over 10,000 high-severity bugs found, but only 75 of 530 disclosed OSS bugs patched

Anthropic

75 of about 530 disclosed high/critical open-source bugs were patched at the time of the update; Anthropic notes this was early in its 90-day window and likely undercounted.

Key questions that rely on this finding

Is AI shifting the balance between finding and fixing vulnerabilities?Discovery is ahead. AI finds real vulnerabilities faster than they are fixed, and simple checks overstate how often AI patches work.

Status history

2026-05-18ReportedMaintainers report AI-assisted report floods. · record
2026-05-22CorroboratedAnthropic's Glasswing update shows disclosure far ahead of patching. · record

What would change this: Evidence that automated repair or triage closes the gap.
Evidence kind: reported: Stated by a party without shareable evidence.
Freshness: Evidence 127d old · recheck in 143 daysNewest evidence May 22, 2026. Half-life 270 days.
Methods tested: AI vulnerability discovery for defense Automated patching
Topics: Vulnerability discovery Vulnerability repair
Fide research: FID-088: Independent verification of autonomous cyber repairs

Cite this record

Fide AI. "AI-driven vulnerability discovery produces reports faster than maintainers can triage and patch them.." Agentic Cyber Explorer, record discovery-outpaces-patching. https://agentic-cyber-explorer.pages.dev/findings/discovery-outpaces-patching/ (corpus as of 2026-09-26).

BibTeX

@misc{fide-ace-discovery-outpaces-patching,
  author = {{Fide AI}},
  title = {AI-driven vulnerability discovery produces reports faster than maintainers can triage and patch them.},
  howpublished = {Agentic Cyber Explorer},
  year = {2026},
  url = {https://agentic-cyber-explorer.pages.dev/findings/discovery-outpaces-patching/},
  note = {Record discovery-outpaces-patching; corpus as of 2026-09-26}
}

Data: JSON · CC BY 4.0

Know of evidence that changes this? Tell us.