{"id":"https://openalex.org/W7160908691","doi":"https://doi.org/10.48550/arxiv.2605.10074","title":"Agentic Fuzzing: Opportunities and Challenges","display_name":"Agentic Fuzzing: Opportunities and Challenges","publication_year":2026,"publication_date":"2026-05-11","ids":{"openalex":"https://openalex.org/W7160908691","doi":"https://doi.org/10.48550/arxiv.2605.10074"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.10074","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10074","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.10074","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135986418","display_name":"Junyoung Park","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Park, Junyoung","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135936393","display_name":"Insu Yun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yun, Insu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.8179000020027161,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.8179000020027161,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.07069999724626541,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.027000000700354576,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8626000285148621},{"id":"https://openalex.org/keywords/codebase","display_name":"Codebase","score":0.71670001745224},{"id":"https://openalex.org/keywords/root","display_name":"Root (linguistics)","score":0.579800009727478},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.47029998898506165},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.45899999141693115},{"id":"https://openalex.org/keywords/root-cause","display_name":"Root cause","score":0.4377000033855438},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.3959999978542328},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.35179999470710754}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8626000285148621},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7239999771118164},{"id":"https://openalex.org/C51929080","wikidata":"https://www.wikidata.org/wiki/Q2425187","display_name":"Codebase","level":3,"score":0.71670001745224},{"id":"https://openalex.org/C171078966","wikidata":"https://www.wikidata.org/wiki/Q111029","display_name":"Root (linguistics)","level":2,"score":0.579800009727478},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5297999978065491},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.47029998898506165},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.45899999141693115},{"id":"https://openalex.org/C84945661","wikidata":"https://www.wikidata.org/wiki/Q7366567","display_name":"Root cause","level":2,"score":0.4377000033855438},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.424699991941452},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42239999771118164},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3959999978542328},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.35179999470710754},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.3481000065803528},{"id":"https://openalex.org/C2781009160","wikidata":"https://www.wikidata.org/wiki/Q735604","display_name":"AspectJ","level":4,"score":0.3463999927043915},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.3427000045776367},{"id":"https://openalex.org/C92811239","wikidata":"https://www.wikidata.org/wiki/Q20998670","display_name":"Expressivity","level":2,"score":0.3303000032901764},{"id":"https://openalex.org/C9616225","wikidata":"https://www.wikidata.org/wiki/Q3929429","display_name":"Semantic reasoner","level":2,"score":0.32010000944137573},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3179999887943268},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.302700012922287},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29809999465942383},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.28130000829696655},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.273499995470047},{"id":"https://openalex.org/C2778222013","wikidata":"https://www.wikidata.org/wiki/Q1136926","display_name":"Alice (programming language)","level":2,"score":0.27129998803138733},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.26930001378059387},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.2515000104904175}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.10074","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10074","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.10074","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10074","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Fuzzers":[0],"and":[1,29,100,106,147,171,203,218],"static":[2],"analyzers":[3],"find":[4,114],"many":[5],"bugs":[6,11,69,194,212],"but":[7,47],"struggle":[8],"with":[9,143,233],"logic":[10,254],"in":[12,70,92,119,133,150,157,216,229,240],"mature":[13],"codebases.":[14],"Triggering":[15],"such":[16],"a":[17,38,63,79,151,160,172,199,249],"bug":[18],"often":[19],"requires":[20],"multi-step":[21],"reasoning":[22,57,76],"that":[23,95,98,116,166,175],"produces":[24],"no":[25],"distinctive":[26],"execution":[27],"feedback,":[28],"variants":[30,115],"can":[31],"appear":[32],"across":[33,141],"implementations":[34],"too":[35],"different":[36],"for":[37,188,252],"single":[39],"pattern":[40],"to":[41,248],"match.":[42],"Recent":[43],"LLM-assisted":[44],"approaches":[45],"help,":[46],"they":[48],"use":[49],"LLMs":[50],"as":[51,55],"auxiliaries":[52],"rather":[53],"than":[54],"the":[56,75,82,93,112,126,184,221,241],"engine.":[58],"We":[59,128,154,180],"propose":[60],"agentic":[61,135,226],"fuzzing,":[62],"bug-finding":[64],"approach":[65],"seeded":[66],"by":[67,104,178],"historical":[68],"which":[71],"deep":[72],"agents":[73],"perform":[74],"directly.":[77],"Given":[78],"reference":[80],"bug,":[81],"agent":[83,113,162],"analyzes":[84],"its":[85,230],"root":[86,145],"cause,":[87,99],"hypothesizes":[88],"new":[89],"scenarios":[90],"elsewhere":[91],"codebase":[94],"may":[96],"share":[97],"verifies":[101],"each":[102],"hypothesis":[103],"generating":[105],"running":[107],"proof-of-concept":[108],"code.":[109],"This":[110],"lets":[111],"differ":[117],"completely":[118],"trigger":[120],"path":[121],"or":[122],"code":[123],"structure":[124],"from":[125,223],"reference.":[127],"identify":[129],"three":[130,196],"practical":[131],"challenges":[132],"implementing":[134],"fuzzing:":[136],"harness":[137],"engineering,":[138],"redundant":[139],"investigations":[140],"seeds":[142,149,177,222],"similar":[144],"causes,":[146],"scheduling":[148],"large":[152],"corpus.":[153],"address":[155],"these":[156],"AFuzz":[158,182,208],"through":[159],"four-stage":[161],"pipeline,":[163],"scenario":[164],"coverage":[165],"deduplicates":[167],"previously":[168],"explored":[169],"scenarios,":[170],"DPP-MAP":[173],"scheduler":[174],"orders":[176],"diversity.":[179],"ran":[181],"on":[183],"V8":[185],"JavaScript":[186],"engine":[187],"about":[189],"one":[190,214],"month,":[191],"finding":[192,253],"40":[193],"(including":[195,213],"duplicates),":[197],"receiving":[198],"total":[200],"$35,000":[201],"bounty,":[202],"being":[204],"assigned":[205],"two":[206],"CVEs.":[207],"also":[209],"found":[210],"19":[211],"duplicate)":[215],"SpiderMonkey":[217],"JavaScriptCore":[219],"using":[220],"V8.":[224],"However,":[225],"fuzzing":[227],"is":[228],"early":[231],"stages":[232],"several":[234],"remaining":[235],"open":[236],"problems":[237],"we":[238,244],"discuss":[239],"paper.":[242],"Still,":[243],"think":[245],"it":[246],"points":[247],"promising":[250],"direction":[251],"bugs.":[255]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-13T00:00:00"}