AI 安全
SWEADV Uses Malicious Issues to Mislead Repair Agents: Over Half Fix the Functionality While Introducing Vulnerabilities
A new benchmark rewrites 150 SWE-bench Verified tasks into 750 issues containing security traps, testing whether automated repair agents will deliver code that is functionally correct but insecure. Across three model backends, an average of 51.7% of cases achieved both the repair and attack objectives, while common model reviews and static analysis still missed many malicious patches.