RustMizan - Vulnerability Detection: leaderboard
RustMizan (2026) evaluates LLM agents with shell access on 173 compilable crate-, file- and function-level Rust variants built from 42 RustSec memory-safety CVEs. This board is the accuracy of deciding whether each variant is vulnerable, in percent; higher is better.
Metric: Vulnerability classification accuracy (%; whether each of the 173 compilable crate-, file- and function-level Rust variants of 42 RustSec memory-safety CVEs, unmutated, each analysed by a ReAct agent with shell access in an Inspect sandbox that returns a structured JSON verdict is correctly called vulnerable or not, 95 of the 173 being vulnerable; higher is better). Source: arxiv.org. Saturation forecast: Around February 2027. 4 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Claude Sonnet 4.6 | 64.7 | #161 |
| 2 | GPT-5.4 | 64.2 | #123 |
| 3 | Gemini 3.1 Pro (Preview) | 57.2 | #94 |
| 4 | Qwen 3.6 Plus | 56.1 | #222 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=rustmizan-vulnerability-detection · How It Works · Data refreshed daily, snapshot 2026-11-13.