developer tools
The Attack-Path Draft Went Back to the Planner
CVE2AP turns vulnerability descriptions into formal planning models and uses execution errors for revision.
Summary
CVE2AP turns vulnerability descriptions into formal planning models and uses execution errors for revision.
The study reports up to 86.9 percent syntax correctness and 78.6 percent solvability, with planner feedback yielding consistent improvement. Its 93.1 percent semantic-correctness figure uses a model-as-expert judge, so a solvable generated attack path still needs independent semantic review.
Why it matters
CVE2AP turns vulnerability descriptions into formal planning models and uses execution errors for revision.
Limits and context
No additional limitation was separately recorded.
Key claims
CVE2AP turns vulnerability descriptions into formal planning models and uses execution errors for revision.
Evidence: source-2026-10-04-021
Sources
- arXiv preprint 2610.03383, original v1arXiv / submitting research authors · primary research
Corrections
: Publication note: This October 4 edition was reconstructed on October 5 after the workstation was offline. It uses original October 2 submissions from the standard Sunday-evening arXiv release, rather than claiming those papers were available for the missed 9 AM run. The date and 9 AM publication slot preserve archive chronology; October 5 developments are excluded. The September 27 Invention Desk is carried over because its replacement was generated October 5.