VulnGym (Hard) - Critical-Operation Localization: leaderboard
Metric: Line recall (%; share of the 43 reference critical operations the agent localizes, given the oracle entry point; Hard level of VulnGym (reference traces of 9 or more steps: 31 GitHub advisories, 46 vulnerability entries); read-only shell commands; locations match within 5 lines of the same repository-relative path). Source: arxiv.org. Saturation forecast: Around March 2028. 9 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | GLM-5.2 | 30.23 |
| 2 | MiniMax-M3 | 23.26 |
| 3 | DeepSeek V4 Flash | 20.93 |
Interactive version: theaggregate.ai/benchmark?slug=vulngym-hard-critical-operation-localization · How It Works · Data refreshed daily, snapshot 2026-09-29.