# Claude Mythos Preview finds 26,000 vulnerabilities in months, but few get patched

Digest AI · Policy & Regulation · published 2026-11-04T13:00:52Z

Canonical: https://digestai.news/story/claude-mythos-preview-finds-26-000-vulnerabilities-in-months-but-few-g

## Summary

AI-powered vulnerability discovery is outpacing human capacity to validate and fix flaws. Project Glasswing’s public ledger shows **Claude Mythos Preview** identified over **26,000 vulnerabilities** across software projects in recent months, yet fewer than **1%** have been patched. Anthropic’s Project Glasswing notes that while AI excels at identifying potential weaknesses, human maintainers struggle to keep up with verification, prioritization, and remediation—especially in open-source projects where contributors often work part-time or volunteer. The bottleneck has shifted from discovery to the human-driven steps of validation, triage, and fixing, which require context, accountability, and time that overburdened teams lack. AI accelerates finding vulnerabilities, but securing software still demands sustained human effort, coordination, and maintenance—problems that won’t vanish with AI adoption.

## Key points

- Claude Mythos Preview flagged **26,000+ vulnerabilities** in months, but only **~1%** were patched, per Project Glasswing data
- Anthropic’s Project Glasswing warns AI-driven discovery outpaces human capacity for validation and remediation
- Open-source maintainers, often volunteers, face growing pressure as AI-generated findings overwhelm their workload

## Why it matters

AI’s ability to uncover vulnerabilities faster exposes a critical gap: human teams can’t scale remediation. Without investment in triage, accountability, and maintenance, even AI-driven security gains risk leaving software insecure.

## Sources

1. [AI Can Surface More Vulnerabilities Than Ever. Humans Still Have to Decide What Comes Next.](https://unite.ai/ai-vulnerability-discovery-remediation-gap) (Unite.AI, 2026-11-04)

Part of the developing story: [Claude Safety Priorities and Vulnerability Backlog](https://digestai.news/thread/anthropic-reportedly-prioritizes-safety-over-image-generation-for-claude) (2 stories)

## Cite

Digest AI, "Claude Mythos Preview finds 26,000 vulnerabilities in months, but few get patched", 4 November 2026, https://digestai.news/story/claude-mythos-preview-finds-26-000-vulnerabilities-in-months-but-few-g

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/claude-mythos-preview-finds-26-000-vulnerabilities-in-months-but-few-g.json