CWE-bench v1 - OWASP - A03 Software Supply Chain Failures - Programmatic Pass@1: leaderboard

Collinear CWE-bench archived v1, OWASP - A03 Software Supply Chain Failures - Programmatic Pass@1, reported as a percentage. 120 private audit-and-patch tasks; four rollouts per task at high reasoning, one hour each; timeouts graded on code at timeout. Native model-specific harnesses. Programmatic success requires exploit blocked and existing tests passing. Separate majority panel of three rubric-based agentic judges checks correctness, happy-path, generalization, integrity and soundness; any failed axis rejects a fix. Pass@1 and Pass@4 remain separate. This is archived Collinear v1, not the Artificial Analysis Stirrup two-hour implementation or CWE-bench v2. Source: https://cwe-bench.com/v1

Metric: Programmatic Pass@1 (%). Source: cwe-bench.com. Saturation forecast: Around July 2027. 12 models tracked.

Top models

#ModelScoreOverall rank
1Gemini 4 Argon75#11
2Gemini 4 Carbon70#2
3Claude Opus 5.565#5
4Claude Fable 5.165#14
5Grok 4.763#43
6DeepSeek V4.1 Flash60#58
7Muse Spark 1.360#42
8GPT-6 Astra58#6
9GPT-6 Sol58#24
10Grok 4.658#44
11Hy4 preview50#66
12Inkling43#270

No result here: #1 Claude Fable 5.2, #10 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=cwe-bench-v1-owasp-a03-software-supply-chain-failures-programmatic-pass-1 · How It Works · Data refreshed daily, snapshot 2026-11-12.