← Front page

Practical AI · Thursday, October 22, 2026

AI Successfully Exploits Open-Source Web Logic Flaws but Struggles with Closed-Source Firmware

McIntyre details that AI models are successful at exploiting open-source web application logic flaws, token logic issues, and file leaks, but struggle significantly with closed-source proprietary software and firmware requiring patch diffing.

personSpencer McIntyre

The tape

1 quote
“So for example, we've had a lot of luck using AI and LLMs to exploit open source web applications. So these types of flaws that are like logic flaws and how like token logic is being handled or expression language injections or file leaks and things like that's pretty darn good with those.”
Spencer McIntyre
Heard on Practical AI — “Exploit Development, Agentic Vulnerability Discovery, and Fake PoCs”, published Thursday, October 22, 2026. Heardvine summarizes and quotes with attribution and timestamps, and links to the original everywhere.
Transcribed via deepinfra · $0.00
AI Successfully Exploits Open-Source Web Logic Flaws but Struggles with Closed-Source Firmware — Heardvine