VulWeaver: LLM-Based Vulnerability Detection Achieves State-of-the-Art Results

Jul 16, 2026

VulWeaver is a novel approach that combines large language models (LLMs) with structured program analysis to improve vulnerability detection in source code. It achieves F1-scores of 0.76 on Java and 0.78 on C/C++ datasets, outperforming existing baselines by 17-25%. In real-world tests, VulWeaver detected 26 true vulnerabilities across 9 Java projects, with 15 confirmed by developers and 5 CVEs assigned.

Why it matters: VulWeaver demonstrates that integrating LLMs with program analysis can significantly advance automated vulnerability detection, with practical impact validated by developer confirmations and CVE assignments.

Full story at: arXiv Software Engineering ↗