CyberGym-E2E (615 tasks) - PoC Generation: leaderboard
CyberGym-E2E (2026) evaluates coding agents across the vulnerability lifecycle on real OSS-Fuzz vulnerabilities in C and C++ projects, with a 10-dollar cost cap and a 90-minute limit per task. This board is the share (%) of the initial 615 tasks where the agent, given only the codebase, writes an input that crashes the vulnerable build; higher is better.
Metric: End-to-end stage S1 rate (%) on the initial 615-task release (OSS-Fuzz vulnerabilities in C/C++ projects): the agent-written PoC input crashes the unpatched build under a sanitizer, with no ground-truth vulnerability data given; with a $10 cost cap and a 90-minute limit per task; higher is better. Source: arxiv.org. Saturation forecast: Around June 2027. 5 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | GPT-5.2 Codex | 30.2 | #189 |
| 2 | Gemini 3 Pro | 29.6 | #137 |
| 3 | Claude Opus 4.5 | 24.9 | #156 |
| 4 | Claude Sonnet 4.5 | 18.1 | #250 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=cybergym-e2e-615-tasks-poc-generation · How It Works · Data refreshed daily, snapshot 2026-11-13.