{"data":{"id":"ac392883-ae85-4ab5-b90b-787bfe016a8f","title":"Is AI Coding Safe? Introducing the Agent Security League | Blog | Endor Labs","summary":"Endor Labs launched the Agent Security League, an independent public leaderboard that benchmarks AI coding agents on whether their generated code is secure. Built on the SusVibes benchmark from Carnegie Mellon University (200 tasks across 77 vulnerability classes), it reports that over 80% of LLM-generated code in realistic settings introduces security vulnerabilities. The leaderboard adds an anti-cheating module that counters agents using git history to reverse-engineer fixes.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://www.endorlabs.com/learn/is-ai-coding-safe-introducing-the-agent-security-league","publishedAt":"2026-10-12T14:53:10.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","Anthropic","Google"],"affectedVendorsRaw":["Claude Code","Cursor","Codex","GPT-5.4","GPT-5.3","Gemini 3.1 Pro","Gemini 3 Pro","Gemini 2.5 Pro","Claude Opus 4.6","Claude Opus 4.5","Claude Sonnet 4.6","Claude Sonnet 4","SWE-Agent"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-12T14:53:10.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}