LLM Vuln-Discovery Adoption Index
How often do published CVEs credit a large language model with the
discovery? This page tracks the signal as it grows. Source:
mythos_attributed_cves — CVEs whose NVD description
or vendor advisory explicitly credits an LLM-assisted discovery, at
high confidence.
604 CVEs credited to LLMs across 18 vendors in the last 24 months.
Monthly count of LLM-credited CVE adds — last 24 months
Each bar is the number of CVEs added in that month
whose advisory or NVD text credits an LLM. The spike in 2026-05 is
partly real (Anthropic / OpenAI both shipped large coordinated
disclosure batches) and partly an artefact of when our ingest first
scanned advisory pages back to 2024.
Top vendors by LLM-credited CVE count
| Vendor | LLM-credited (24mo) | All CVEs (24mo) | LLM share | Families |
|---|---|---|---|---|
| 151 | 2,531 | 5.97% | openai 151 | |
| Mozilla | 141 | 545 | 25.87% | anthropic 141 |
| Apple | 93 | 2,975 | 3.13% | openai 93 |
| Microsoft | 89 | 4,844 | 1.84% | openai 89 |
| Linux Kernel | 77 | 9,526 | 0.81% | openai 75, anthropic 2 |
| OpenSSL | 25 | 40 | 62.50% | anthropic 25 |
| Torproject | 6 | 6 | 100.00% | anthropic 6 |
| wolfSSL | 5 | 31 | 16.13% | anthropic 5 |
| Freerdp | 4 | 68 | 5.88% | anthropic 4 |
| FreeBSD | 3 | 36 | 8.33% | anthropic 3 |
| Gogs | 2 | 26 | 7.69% | openai 2 |
| Gnupg | 2 | 8 | 25.00% | anthropic 2 |
| Xen | 1 | 20 | 5.00% | anthropic 1 |
| Nuxt | 1 | 16 | 6.25% | anthropic 1 |
| Ghost | 1 | 10 | 10.00% | anthropic 1 |
| Gitoxidelabs | 1 | 2 | 50.00% | anthropic 1 |
| Minio | 1 | 7 | 14.29% | anthropic 1 |
| Nsa | 1 | 20 | 5.00% | anthropic 1 |
Click a vendor name to see its full research
page including the per-CVE list.
Generated 19 June 2026 13:18 UTC <span class="time-ago" data-iso="2026-06-19T13:18:30Z"></span>.