Last analyzed 9/9/2026

Language Model Security Database

Explore primary-source AI security research, evaluated models, attack techniques, and defensive evidence.

985 research findings · 1123 evaluated models

Findings

985

Models evaluated

1123

Paper-evaluated models

Any selected model can match.

Refine by category

Findings match every selected category.

Attack Type

Attack Context2 selected

Architecture Components

Attack Surface

Impact1 selected

Advanced filters

Published fromPublished through

Research indexed from arXiv.

Evidence status

Filtered research findings

2 entries

Matches every word across titles, descriptions, sources, affected systems, and models.

Repository-Level Coding Agent Vulnerability Detection Gaps

Published 8/3/2026

Analyzed 8/13/2026

VulnGym measures whether coding agents can locate and explain repository-level security vulnerabilities from realistic advisory and source-code context. The benchmark contains 184 reviewed advisories, 408 line-annotated vulnerability entries, and 23 repositories, with separate end-to-end detection and oracle-conditioned localization tasks.

VulnGym: Benchmarking Coding Agents for Repository-Level Vulnerability Detection

Evaluated models: DeepSeek V4 Flash, GLM 5.2, MiniMax-M3 +4 more

Source: arXiv

Prompt injection across agent privilege boundaries

Published 7/21/2026

Analyzed 9/9/2026

Untrusted issue descriptions and tool responses can redirect privileged coding and tool agents. Twin Agent separates exploration from execution and restricts the information exchanged between them.

Twin Agent: Context Residual Compression for Privilege Separated Agents

Evaluated models: GPT-5.2, Gemini 2.5 Flash, Gemini 3.5 Flash

Source: arXiv

Research methodology

Entries summarize publicly available primary-source security research. Model names reflect only systems explicitly evaluated by the cited paper, and measurements are research-reported unless independent verification is stated.