LLM Vuln-Discovery Adoption Index
How often do published CVEs credit a large language model with the
discovery? This page tracks the signal as it grows. Source:
mythos_attributed_cves — CVEs whose NVD description
or vendor advisory explicitly credits an LLM-assisted discovery, at
high confidence.
941 CVEs credited to LLMs across 24 vendors in the last 24 months.
Monthly count of LLM-credited CVE adds — last 24 months
Each bar is the number of CVEs published in that
month whose advisory or NVD text credits an LLM. The spike in 2026-05
is partly real (Anthropic / OpenAI both shipped large coordinated
disclosure batches) and partly an artefact of when our ingest first
scanned advisory pages back to 2024.
Top vendors by LLM-credited CVE count
| Vendor | LLM-credited (24mo) | All CVEs (24mo) | LLM share | Families |
|---|---|---|---|---|
| 647 | 3,492 | 18.53% | openai 647 | |
| Apple | 239 | 3,439 | 6.95% | openai 239 |
| Microsoft | 204 | 6,034 | 3.38% | openai 204 |
| Linux Kernel | 169 | 10,096 | 1.67% | openai 166, anthropic 3 |
| Mozilla | 141 | 680 | 20.74% | anthropic 141 |
| wolfSSL | 37 | 63 | 58.73% | anthropic 37 |
| OpenSSL | 25 | 40 | 62.50% | anthropic 25 |
| Symfony | 10 | 27 | 37.04% | anthropic 10 |
| Sensiolabs | 9 | 33 | 27.27% | anthropic 9 |
| Freerdp | 6 | 76 | 7.89% | anthropic 6 |
| Nuxt | 6 | 17 | 35.29% | anthropic 6 |
| Torproject | 6 | 6 | 100.00% | anthropic 6 |
| FreeBSD | 3 | 41 | 7.32% | anthropic 3 |
| Linux Foundation | 3 | 253 | 1.19% | anthropic 3 |
| Gnupg | 2 | 8 | 25.00% | anthropic 2 |
| Gogs | 2 | 22 | 9.09% | openai 2 |
| Envoyproxy | 1 | 40 | 2.50% | anthropic 1 |
| Ghost | 1 | 9 | 11.11% | anthropic 1 |
| Gitoxidelabs | 1 | 2 | 50.00% | anthropic 1 |
| Minio | 1 | 7 | 14.29% | anthropic 1 |
| Nsa | 1 | 21 | 4.76% | anthropic 1 |
| Openexr | 1 | 28 | 3.57% | anthropic 1 |
| Squid-Cache | 1 | 9 | 11.11% | anthropic 1 |
| Xen | 1 | 21 | 4.76% | anthropic 1 |
Click a vendor name to see its full research
page including the per-CVE list.
Generated 23 August 2026 00:24 UTC .