- Researchers tested AI-generated patches on six CVEs with poor success rates
- Many fixes failed, altered behavior, or introduced new vulnerabilities
- Guidance improved outcomes, leading to FLAWED evaluation harness release
When using Generative Artificial Intelligence (GenAI) to fix vulnerabilities, security professionals are most of the time just robbing Peter to pay Paul, experts have warned.