{"data":{"id":"0f518b6c-08fe-48fb-9816-146e5d14444f","title":"Where AI Vulnerability Discovery Harnesses Go Quiet: Structural False Negatives and Hidden Vulnerabilities","summary":"Knostic researchers examined how LLM-based vulnerability discovery harnesses can miss real, reachable flaws because of their surrounding code, such as file selection, filtering, and result merging. Starting from their own OpenAnt and raptor harnesses and 10 other open-source harnesses, they mapped 13 points where findings get dropped and organized them into a taxonomy. In six harnesses, a single file was dropped before the model saw it, five of them silently.","solution":"N/A -- no mitigation discussed in source.","labels":["research","security"],"sourceUrl":"https://arxiv.org/abs/2610.29379v1","publishedAt":"2026-10-21T08:05:15.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["model_evasion","prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["OpenAnt","raptor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-21T08:05:15.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}