The public record is small. The signal is real.
Bugflation is the gap between AI-accelerated vulnerability discovery and the slower human systems that validate, patch, and deploy fixes. We track real advisories, real CVEs, named AI systems, and attribution labels you can audit. CopyFail (CVE-2026-31431) is the case that made the term unavoidable.
AI-assisted systems are starting to show up in accepted disclosure workflows. The right response is not panic or dismissal; it is better intake, faster validation, and patch pipelines that can absorb the new volume.
CopyFail, Big Sleep, AISLE, Claude, DepthFirst, Palo Alto, Security Copilot, XBOW, and bug-bounty Hackbots show different versions of the same economic shift: more vulnerability hypotheses can be generated and tested per unit of expert time.
Some advisories directly name an AI system. Others rely on an operator write-up plus a public CVE. The index labels that difference instead of hiding it in a single score.
More reports are not automatically more security. Maintainers need reproducible evidence, duplicate detection, exploitability review, and regression tests to turn claims into shipped fixes.
The teams that handle bugflation well will not be the ones that find the most issues. They will be the ones that close the loop from credible report to deployed patch fastest.
These are not model leaderboards. They are evidence profiles for systems that appear in public vulnerability-discovery workflows.
Anthropic's restricted cyber-capable frontier model, with public credits across FreeBSD, Firefox, curl, Squid, Symfony, and Project Glasswing's CVD ledger.
The first public AI vulnerability-research agent with accepted real-world findings across SQLite, Chrome V8, and Apple WebKit.
Gemini CLI and experimental Gemini review agents with explicit discovery credits in accepted Linux kernel fixes.
Microsoft's multi-model agentic scanning harness, credited by Microsoft with 16 public CVEs across Windows networking and authentication code.
Z.AI's GLM models now have direct upstream discovery credits across FreeBSD kernel and userland advisories and Apple WebKit.
An autonomous security analyzer with a large public registry and validated credits across OpenSSL, FreeBSD, curl, Apache, Chrome, Squid, and other projects.
AISLE CVE discovery registry 268 assigned CVEs claimed
Public Claude-assisted disclosure credits outside the Mythos-only record, spanning browsers, operating systems, cryptography, office documents, cloud auth, CMSs, and Microsoft/Apple platform bugs.
GitHub Security Lab's open-source AI-powered audit framework, with human-validated advisories across major web applications and frameworks.
GHSL Taskflow and named GHSL-agent advisory audit 43 public advisory pages
OpenAI's defensive vulnerability-research program, combining frontier cyber models, Codex Security, expert validation, and coordinated patching.
The AI-assisted vulnerability research system credited in CopyFail, with a broader public record spanning Linux, Apple platform, PostgreSQL, and tracker-backed findings.
Xint public bug tracker 51 public tracker rows
Bynario's AI-driven vulnerability-research pipeline, with direct Apple and Linux upstream credits across binary analysis, kernel discovery, validation, and patching.
Zellic's agentic security platform, with public accepted findings in the Linux kernel, Rabby Wallet, NEAR Intents, and Miden Node.
DepthFirst's autonomous low-level-code analysis platform, with accepted NGINX, FFmpeg, and Apache HTTP Server campaigns.
Striga's AI-based source-code auditing platform, with public CVE credits and research write-ups across Apache httpd, Tomcat, Ollama, axios, and Mattermost Desktop.
Striga CVE tracker 20 public CVE records
ZeroPath's AI-native SAST and security-research workflow, with public CVE-backed and upstream-patched findings across ProFTPD, Spinnaker, better-auth, FFmpeg, sudo, and other open-source projects.
ZeroPath Wall of Fame 47 fixed public records
An autonomous AI-driven penetration-testing platform with public bug-bounty milestones and self-reported critical Microsoft and Exim RCE credits.
Palo Alto Networks' May 2026 frontier-model scan wave, reported as 26 CVEs across more than 130 products, with exact per-CVE model attribution unpublished.
Tencent Xuanwu Lab's LLM-based discovery engine, with direct public credits across cryptography, Vault, PostgreSQL, Windows, Linux, and FreeBSD.
LLM-enhanced fuzz-target generation and triage inside Google's OSS-Fuzz ecosystem.
Microsoft's AI security assistant, publicly tied to a GRUB2, U-Boot, and Barebox bootloader vulnerability campaign.
OpenAI's agentic security researcher and Codex Security workflow, now carrying direct credits across browsers, operating systems, network services, and media tooling.
An autonomous agentic pentesting platform with an accepted Chrome credit and a public CVE-backed embedded-device RCE disclosure.
AI-assisted GitHub Security Lab research that the official AI-agent index verifies without identifying the particular agent or workflow on the individual advisory.
GHSL system-unspecified AI-agent advisories 2 public advisory pages
The policy layer around AI-assisted vulnerability discovery: human-in-the-loop rules, accountable operators, and bounty eligibility.
Evidence index is editorial: direct upstream credits score higher than self-reported attribution. It is not a model capability benchmark. Read the methodology.
Every finding page includes an attribution label and references. Direct upstream credits and self-reported AI attribution are intentionally kept separate.
Squid's advisory records independent reports from AISLE and Calif/Anthropic researchers for an FTP gateway response-smuggling flaw that can expose worker memory.
Self-reported attributionMicrosoft directly credits Doyensec researchers working with Claude and Anthropic Research for a Windows USB Hub Driver elevation-of-privilege vulnerability.
Direct source attributionAISLE's public registry links ten newly disclosed CVEs to its AI-native engine across Foreman, Gitea, Joomla, Wireshark, dhcpcd, n8n, and alsa-lib.
Self-reported attributionChrome 150 directly credits OpenAI Codex Security on CVE-2026-14431, a High-severity V8 type confusion published in June 2026.
Direct source attributionChrome 150 directly credits Wongi Lee of Theori with Xint Code, alongside Jungwoo Lee, for a Medium-severity FFmpeg out-of-bounds read.
Direct source attributionLLM-generated fuzz targets produce a 26-vulnerability OSS-Fuzz milestone, anchored by OpenSSL.
Nov 2024Project Zero describes an exploitable SQLite stack buffer underflow found before release.
Feb 2025The Hackbots policy puts human validation, scope compliance, and operator accountability on record.
Mar 2025Microsoft describes a 20-CVE GRUB2, U-Boot, and Barebox campaign accelerated by Security Copilot.
Jul 2025CVE-2025-6965 becomes the clearest public case of AI-assisted discovery paired with threat intelligence.
Jan 2026AISLE reports 20 OpenSSL CVEs across three coordinated releases, with accepted fixes on many entries.
Mar 2026Anthropic and Mozilla document Firefox 148 findings, with Mozilla advisories crediting Claude across CVEs.
Mar 2026Microsoft/NVD records confirm critical CVEs; XBOW supplies the AI-attribution claim.
Apr 2026Xint Code scales a Taeyang Lee AF_ALG/page-cache insight across Linux crypto and surfaces CVE-2026-31431.
Apr 2026ZeroPath Research adds a self-reported AI-assisted trail for three CVE-backed RCE or RCE-adjacent findings across deployment and FTP infrastructure.
Apr 2026FreeBSD credits AISLE Research Team for dhclient RCE, dhclient heap corruption, and libnv stack corruption advisories in the April 29 release.
May 2026Striga says an open-weights scan costing under $100 surfaced CVE-2026-23918; Apache credits Dmitruk/striga.ai and Strzalkowski/isec.pl.
May 2026Linux commits for CVE-2026-31532 and CVE-2026-31694 carry Assisted-by: Bynario AI; the CAN write-up details discovery, validation, and patching.
May 2026Palo Alto says frontier models drove the majority of its May Patch Wednesday findings, while exact per-CVE model attribution remains unpublished.
May 2026DepthFirst says its autonomous low-level analysis platform found four confirmed NGINX CVEs, led by CVE-2026-42945.
May 2026Project Glasswing now exposes a public ledger of disclosed, patched, CVE/GHSA-backed open-source findings attributed to Claude Mythos Preview.
Jun 2026Public patches and advisories connect model-assisted work to dnsmasq, FreeBSD, OpenBSD, Firefox, Chrome, and the HTTP/2 Bomb campaign.
Jun 2026Apple directly names Codex Security, Claude, and researchers using Z.AI GLM across five WebKit CVEs in its June 29 security notes.
Jul 2026Squid, FreeBSD, Apache, and Microsoft records show independent systems converging on the same CVEs, without increasing the global unique-CVE count.
A primary-source audit adds post-cutoff disclosures, backfills public campaigns, preserves shared attribution, and separates tracker claims from upstream severity.
AI-enabled discovery is increasing pressure on vulnerability identifiers, advisory quality, attribution, and disclosure workflows.
DirtyFrag and Copy Fail2 are not new AI-attributed findings, but they are important CopyFail-adjacent evidence: Linux still has dangerous seams where zero-copy networking, page-cache provenance, and in-place crypto meet.
AI-assisted reports should arrive with affected versions, input, expected result, actual result, and a minimized proof path. Reject vibes, reward evidence.
Separate upstream credit, self-reported tool usage, and secondary reporting. The distinction makes the data stronger, not weaker.
More submissions mean more validation work. Invest in duplicate detection, maintainer playbooks, and regression tests before the queue spikes.
Run guided variant analysis after every serious fix. Attackers will search nearby code. Defenders should search it first.