Back Cybersecuritynews

Claude AI Discovers Zero

Cybersecuritynews •Guru Baran • March 31, 2026

Anthropic’s Claude AI successfully discovered zero-day Remote Code Execution (RCE) flaws in both Vim and GNU Emacs. The discoveries highlight a massive paradigm shift in bug hunting, demonstrating that AI models can uncover critical vulnerabilities in legacy software with simple natural-language prompts. The Vim RCE: Compromise Upon File Open The research initiative began with a […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI-Driven Discovery of RCE Vulnerabilities in Vim and GNU Emacs Researcher Hung Nguyen from Calif used Anthropic’s Claude Code AI to identify zero-day remote code execution (RCE) vulnerabilities in Vim and GNU Emacs. The vulnerabilities allow arbitrary command execution simply by opening a specially crafted file. In Vim, the flaw stems from missing security checks in modeline handling, affecting versions 9.2.0271 and earlier, which has been patched as CVE-2026-34714. The GNU Emacs vulnerability, linked to its Git integration, allows similar exploits but remains unpatched as maintainers attribute the issue to Git. This incident underscores the potential for AI tools to uncover critical vulnerabilities in legacy software rapidly. Both editors are widely used by developers, increasing the impact of these vulnerabilities. The Vim maintainers released a patch on March 30, 2026, while Emacs maintainers have not yet addressed the issue. 4 sources 71

Claude AI Discovers Zero

The full story

Extracted Entities

Attack Types (1)

Platforms (2)