Understanding the (In)Security of Vibe-Coded Applications

arXiv:2606.23130 · cs.CR, cs.SE · Submitted 2026-06-22 · Read on arXiv

cs.CR, cs.SE

Submitted: 2026-06-22

Updated: 2026-09-14

Code: https://github.com/openai/codex

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Failure Modes — 9× in this paper · explained in 3 episodes
AI Agents — 7× in this paper · explained in 2 episodes
Agent Harness — 6× in this paper · explained in 2 episodes
Hallucination — 5× in this paper · explained in 3 episodes
Benchmark — 4× in this paper · explained in 2 episodes
Trace — 4× in this paper · explained in 2 episodes
Human-in-the-Loop — 3× in this paper · explained in 3 episodes
Large Language Models (LLMs) — 3× in this paper · explained in 6 episodes
Redundancy — 3× in this paper · explained in 2 episodes
Prompt Engineering — 2× in this paper · explained in 4 episodes
Verification — 2× in this paper · explained in 2 episodes
Agent Skills — 1× in this paper · explained in 1 episode
Benchmarking — 1× in this paper · explained in 3 episodes
Foundation Model — 1× in this paper · explained in 3 episodes
Foundation Models — 1× in this paper · explained in 7 episodes
Multi-Agent System — 1× in this paper · explained in 6 episodes

Sources

Related papers