Google Freezes Open Source Bug Bounty Program Due To Flood Of AI Submissions
Beyond restricting which Gemini models free and AI Plus users can use, Google has also announced that it is hitting pause on the Open Source Software Vulnerability Reward Program (OSS VRP). It’s only this specific bug bounty program that’s being paused, as the internet search giant still recommends bug bounty hunters contribute to other programs, […] The post Google Freezes Open Source Bug Bounty…
Google has temporarily suspended its Open Source Software Vulnerability Reward Program (OSS VRP) due to an influx of artificial intelligence-generated bug submissions. The company's engineers and open-source maintainers were struggling to handle thousands of poorly-written reports that were neither valid nor exploitable, resulting in them spending excessive time validating code instead of addressing genuine vulnerabilities.
Despite the freeze, existing submissions will remain unaffected, and Google intends to reassess the program in early 2027. The issue mirrors concerns raised by the cybersecurity industry last year, where concerns were expressed about the quality of bug bounty reports generated by AI.
Written by urgent.news from Lowyat.NET's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
Also reported by 1 other outlet
- Google pauses open source bug bounty program over AI spam techinasia.com
