Zombie CVEs: Put to Rest by Humans, Dug Back Up by AI Agents

New research: 65–75% of frontier AI agents’ working patches resurrect vulnerabilities that were already found, fixed, and buried. In 2023, a path traversal vulnerability in Starlette, one of Python’s most popular web frameworks – was found, disclosed as CVE-2023-29159, and fixed. Case closed.