An Overview of Large Language Model Approaches for Automated Software Vulnerability Detection

2026;
: pp. 162 - 170
ISSN: 2707-2371

https://doi.org/10.23939/csn2026.01.162
Received: September 30, 2025
Accepted: April 10, 2026
Published: June 01, 2026
1
Lviv Polytechnic National University, Department of Information Technologies Security
ORCID: 0009-0008-3604-8424

This article is licensed under the Creative Commons Attribution-NonCommercial 4.0 International License (CC BY-NC 4.0)

In the modern world, software security has become a top priority, as it directly determines the reliability of digital solutions and user trust. The growing number of cyber threats and the increasing complexity of software systems highlight the necessity of using effective tools for control and vulnerability prevention.

Traditional testing methods, such as static and dynamic analysis, remain important elements of security assurance; however, they face certain limitations in terms of speed, scalability, and completeness of vulnerability detection. These shortcomings drive the search for new approaches capable of enhancing existing solutions.

Advances in artificial intelligence methods open up new opportunities in software security. This includes not only the improvement or gradual replacement of traditional testing methods but also the introduction of fundamentally new approaches capable of preventing threats at early stages, as well as analyzing and prioritizing risks. Such solutions reduce the number of routine tasks and relieve security teams from excessive workloads, thereby increasing the overall efficiency and resilience of digital systems.

This article provides a review of the potential applications of AI-based methods in the context of software security. Their capabilities, limitations, and development prospects are analyzed. The findings indicate that integrating artificial intelligence into cybersecurity processes is a promising direction that requires further research to build more resilient and reliable software systems.

  1. Pathirathna, P. P. W., Ayesha, V. A. I., Imihira, W. A. T., Wasala, W. M. J. C., Kodagoda, N., & Edirisinghe, E. A. T. D. (2017). Security testing as a service with docker containerization. 2017-December. Scopus. https://doi.org/10.1109/SKIMA.2017.8294109
  2. Dušan Gabrijelčič, Tomaž Klobučar. (2023). Artificial intelligence for cybersecurity: Literature review and future research directions.. Information Fusion, 97, 101804. https://doi.org/10.1016/j.inffus.2023.101804
  3. Gupta, M., Akiri, C., Aryal, K., Parker, E., & Praharaj, L. (2023). From ChatGPT to ThreatGPT: Impact of Generative AI in Cybersecurity and Privacy. IEEE Access, 11, 80218–80245. https://doi.org/10.1109/ACCESS.2023.3300381
  4. Fu, M., Pasuksmit, J., & Tantithamthavorn, C. (2024). AI for DevSecOps: A Landscape and Future Opportunities. ACM Transactions on Software Engineering and Methodology, 34, 1–61. https://doi.org/10.1145/3712190
  5. Deng, Z., Guo, Y., Han, C., Ma, W., Xiong, J., Wen, S., & Xiang, Y. (2024). AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways. ACM Computing Surveys, 57, 1–36. https://doi.org/10.1145/3716628
  6. Keltek, M., Hu, R., Sani, M. F., & Li, Z. (2025). LSAST: Enhancing Cybersecurity Through LLM- Supported Static Application Security Testing. ICT Systems Security and Privacy Protection, 166–179. https://doi.org/10.1007/978-3-031-92882-6_12
  7. Bommasani, R., Hudson, D. A., Adeli, E., Altman, R., Arora, S., von Arx, S., Bernstein, M. S., Bohg, J., Bosselut, A., Brunskill, E., Brynjolfsson, E., Buch, S., Card, D., Castellon, R., Chatterji, N., Chen, A., Creel, K., Davis, J. Q., Demszky, D., … Liang, P. (2021, August 16). On the Opportunities and Risks of Foundation Models. arXiv.Org. https://arxiv.org/abs/2108.07258v3
  8. Julius Henke. (2025) AutoPentest: Enhancing Vulnerability Management With Autonomous LLM Agents.  https://www.researchgate.net/publication/391776729_AutoPentest_Enhancing_Vulnerability_ Management_With_Autonomous_LLM_Agents
  9. Khare, A., Dutta, S., Li, Z., Solko-Breslin, A., Alur, R., & Naik, M. (2023, November 16). Understanding the Effectiveness of Large Language Models in Detecting Security Vulnerabilities. arXiv.Org. https://arxiv.org/abs/2311.16169v3
  10. Rijha  Safdar.  2024.  Data  and  Context  Matter:  Towards  Generalizing  AI-based  Software Vulnerability Detection.https://www.researchgate.net/publication/394942028_Data_and_Context_Matter_Towards_Gener alizing_AI-based_Software_Vulnerability_Detection
  11. Jin, S. (2025). Large Language Models for Vulnerability Detection in Static Code Analysis: A Survey. 2025 8th International Conference on Artificial Intelligence and Big Data (ICAIBD), 473–479. https://doi.org/10.1109/ICAIBD64986.2025.11082007