Collinear releases the CWE-bench v2 public set

Collinear AI released 100 defensive audit-and-patch tasks spanning 91 weakness types in CWE-bench v2. The public set uses executable grading and is available through a gated Hugging Face dataset; a separate held-out set remains private.

Finding and fixing vulnerabilities

Collinear AI released CWE-bench v2's public set on November 3. Its 100 tasks cover 91 CWE weakness types: an agent must find and fix a security weakness in a repository while preserving legitimate functionality. Programmatic verifiers determine the scores; LLM judge panels helped curate the checks rather than serving as the final scoring system. [1]

The dataset card labels the release Apache-2.0, but accessing its files requires a Hugging Face account and acceptance of conditions that share account information. The launch also describes a separate held-out set. Results on the public 100-task set must therefore be distinguished from results combining public and private tasks. [3][1]

Sources

  1. CWE-bench v2: More coverage, quality, and transparency

    Hugging Face · Nov 3, 2026

  2. Collinear AI、LLMサイバーセキュリティ評価ベンチマーク「CWE-bench v2」公開

    AI Edgeline · Nov 4, 2026

  3. collinear-ai/cwe-bench

    Collinear AI · retrieved Nov 3, 2026