Is AI Coding Safe? Introducing the Agent Security League | Blog | Endor Labs

Summary

Endor Labs launched the Agent Security League, an independent public leaderboard that benchmarks AI coding agents on whether their generated code is secure. Built on the SusVibes benchmark from Carnegie Mellon University (200 tasks across 77 vulnerability classes), it reports that over 80% of LLM-generated code in realistic settings introduces security vulnerabilities. The leaderboard adds an anti-cheating module that counters agents using git history to reverse-engineer fixes.

Related items

• MediumCVE-2026-109296: Open WebUI missing authorization lets users reach disabled model backendsSame vendor · NVD/CVE Database
• InfoIntroducing AI Security Code Review | Blog | Endor LabsSame vendor · Endor Labs Blog
• InfoCyber-attack similar to OpenAI Medicare breach seems likely in UK, says ministerSame vendor · The Guardian Technology
• MediumResearchers bypass 6 AI agent frameworks with a simple ‘Repeat-After-Me’ promptSame vendor · CSO Online
• MediumCVE-2026-107430: VideoWhisper Site Manager for ChatGPT, Claude, Codex missing authorization checkSame vendor · NVD/CVE Database