P2Patch: Exploit-Guided Vulnerability Repair

Summary

P2Patch is a generative adversarial repair system in which an exploitation agent builds a proof of vulnerability, a patching agent repairs the program, and the exploitation agent then searches for a distinct same-vulnerability exploit against the patch. Across 101 C/C++ and Java CVE subjects, the loop surfaced a distinct confirmed exploit in 41% of runs after the original proof of vulnerability was blocked. Held-out fix-closed coverage rose from 78.1% under single-pass Claude Code repair to 84.7%, and beyond-upstream coverage rose from 42.1% to 62.5%.