CyberBinGym scores: Codex 88% recovery / 20% exploit, Kimi Code 0% exploitation

dawnsongtweets · x · 2026-11-12

CyberBinGym thread results (vulnerability recovery / end-to-end exploitation): Codex (GPT-5.6 Sol) 88%/20%, Claude Code (Claude Opus 5) 85%/6%, Kimi Code (Kimi K3) 64%/0%.

Scoring is split: recovery requires a PoC that crashes only the vulnerable build under sanitizers; exploitation requires capturing a secret flag from a separate victim service. All three agents recover most vulnerabilities from patches, but turning them into working exploits remains far harder — though binary-only exploitation is now within reach.

Related event: Dawn Song's Team Releases CyberBinGym: AI Can Exploit Real Vulnerabilities from Binary Patches Alone(9 posts)→

Original post →

More from Models

Models channel →