Researcher: AI cut GitLab RCE reproduction from 48 hours to 1, collapsing exploit lead time
matthew_d_green · x · 2026-10-22
Cryptographer Matthew Green boosts security researcher joaxcar's observation: once someone finds a vulnerability with AI, others can reproduce it trivially. He spent 48 hours working with Codex on heap alignment for the first GitLab RCE; people 'recreating it' now do so in about 1 hour, even before full details are public.
Key point: AI doesn't just speed up vulnerability discovery — it collapses the exclusivity window after disclosure, pushing patch windows toward zero.
Related event: Cryptographer Says AI Slashes Vulnerability Reproduction Time(2 posts)→
More from Safety
- Vulnerabilities were always there — AI is just better at finding them — jonmarkgo · 2026-10-22
- Security researcher: no AI hacking explosion yet, just a patching explosion — matthew_d_green · 2026-10-22
- PHP hit by two unauthenticated RCE bugs, details leaked pre-patch, 1.5M servers exposed — neal_lathia · 2026-10-22
- Ed Simeoni: cybersecurity needs 'cyber defense factories' running frontier models 24/7 — AccBalanced · 2026-10-22
- Econoar on AI Hacking: Short-Term Attackers Win, Long Term It's a 'Hardening Era' — econoar · 2026-10-22
- Employees fired over false AI-detector positives are suing — and winning settlements — DavidLinthicum · 2026-10-22