{"id":"https://openalex.org/W7167232444","doi":"https://doi.org/10.48550/arxiv.2607.01764","title":"Mastermind: Strategy-grounded Learning for Repository-Scale Vulnerability Reproduction","display_name":"Mastermind: Strategy-grounded Learning for Repository-Scale Vulnerability Reproduction","publication_year":2026,"publication_date":"2026-07-02","ids":{"openalex":"https://openalex.org/W7167232444","doi":"https://doi.org/10.48550/arxiv.2607.01764"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.01764","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.01764","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.01764","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139965114","display_name":"Mingzhe Du","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Du, Mingzhe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001659855","display_name":"Luu Anh Tuan","orcid":"https://orcid.org/0000-0001-6062-207X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tuan, Luu Anh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124882525","display_name":"Tianyi Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Tianyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028872220","display_name":"Renyang Liu","orcid":"https://orcid.org/0000-0002-7121-1257"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Renyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139981881","display_name":"Zhijiang Guo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Zhijiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139963704","display_name":"Dong Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Dong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5140020306","display_name":"See-Kiong Ng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ng, See-Kiong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.5236999988555908,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.5236999988555908,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.22689999639987946,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.06379999965429306,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/planner","display_name":"Planner","score":0.72079998254776},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.6299999952316284},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5819000005722046},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.5386000275611877},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.48260000348091125},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.44440001249313354},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.43470001220703125},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4023999869823456},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.4016999900341034}],"concepts":[{"id":"https://openalex.org/C2776999362","wikidata":"https://www.wikidata.org/wiki/Q2349274","display_name":"Planner","level":2,"score":0.72079998254776},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6879000067710876},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.6299999952316284},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5819000005722046},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.5386000275611877},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.48260000348091125},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.45750001072883606},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4490000009536743},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.44440001249313354},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.43470001220703125},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4023999869823456},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.4016999900341034},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.3758000135421753},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3327000141143799},{"id":"https://openalex.org/C73602740","wikidata":"https://www.wikidata.org/wiki/Q7795822","display_name":"Thompson sampling","level":3,"score":0.3294999897480011},{"id":"https://openalex.org/C22367795","wikidata":"https://www.wikidata.org/wiki/Q7625208","display_name":"Structured prediction","level":2,"score":0.3197000026702881},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.2980000078678131},{"id":"https://openalex.org/C183469790","wikidata":"https://www.wikidata.org/wiki/Q333501","display_name":"Crash","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.28049999475479126},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.2741999924182892},{"id":"https://openalex.org/C77967617","wikidata":"https://www.wikidata.org/wiki/Q4677561","display_name":"Active learning (machine learning)","level":2,"score":0.27149999141693115},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C2778134712","wikidata":"https://www.wikidata.org/wiki/Q1047307","display_name":"Bundle","level":2,"score":0.25850000977516174},{"id":"https://openalex.org/C2778583558","wikidata":"https://www.wikidata.org/wiki/Q771245","display_name":"Code reuse","level":3,"score":0.2578999996185303},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.2572000026702881}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.01764","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.01764","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.01764","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.01764","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Repository-level":[0],"vulnerability":[1],"reproduction":[2],"is":[3,49,71,81,140,221],"a":[4,14,22,26,103],"demanding":[5],"software":[6],"engineering":[7],"(SE)":[8],"task:":[9],"an":[10,127,181,222],"agent":[11],"must":[12],"inspect":[13],"codebase,":[15],"infer":[16],"the":[17,31,35,47,57,67,72,144,176],"input":[18],"grammar":[19],"that":[20,30,63,106,134,217],"reaches":[21],"vulnerable":[23],"path,":[24],"construct":[25],"proof-of-conceptv(PoC),":[27],"and":[28,91,96,123,168,193,204,208,212,224],"verify":[29],"crash":[32],"disappears":[33],"on":[34,162],"patched":[36],"build.":[37],"Recent":[38],"LLM":[39],"agents":[40],"can":[41],"often":[42],"execute":[43],"these":[44],"steps":[45],"when":[46],"approach":[48],"correct,":[50],"yet":[51],"they":[52],"still":[53],"fail":[54],"by":[55],"choosing":[56],"wrong":[58],"strategy.":[59],"This":[60],"paper":[61],"argues":[62],"strategy,":[64],"rather":[65],"than":[66],"full":[68],"action":[69],"trajectory,":[70],"right":[73],"learning":[74,110,148,218],"unit":[75],"for":[76,227],"such":[77],"SE":[78,230],"agents:":[79],"it":[80],"compact":[82],"enough":[83,87,93],"to":[84,88,94,149,210],"optimize,":[85],"concrete":[86],"guide":[89,135],"execution,":[90],"stable":[92],"store":[95],"reuse":[97],"across":[98],"attempts.":[99,137],"We":[100,159],"present":[101],"Mastermind,":[102],"dual-loop":[104],"framework":[105],"separates":[107],"transferable":[108,225],"strategy":[109,132,147],"from":[111,206],"task-specific":[112],"experience.":[113],"A":[114],"trainable":[115],"planner":[116,139,199],"learns":[117],"reusable":[118],"vulnerability-reproduction":[119],"strategies":[120,220],"through":[121],"SFT":[122],"milestone-based":[124],"GRPO,":[125],"while":[126],"experience":[128],"loop":[129],"maintains":[130],"task-local":[131],"records":[133],"subsequent":[136],"The":[138,197],"trained":[141],"independently":[142],"of":[143],"executor,":[145,178],"allowing":[146],"improve":[150],"multiple":[151],"frozen":[152,177],"executors":[153],"without":[154],"modifying":[155],"their":[156],"action-generation":[157],"capability.":[158],"evaluate":[160],"Mastermind":[161,179],"CyberGym":[163],"using":[164],"260":[165],"training":[166],"tasks":[167],"200":[169],"held-out":[170],"evaluation":[171],"tasks.":[172],"With":[173],"GPT-5.5":[174],"as":[175],"achieves":[180],"84.5%":[182],"pass":[183],"rate,":[184],"outperforming":[185],"open-book":[186],"PoC":[187],"context":[188],"(60.0%),":[189],"Best-of-8":[190],"sampling":[191],"(63.0%),":[192],"iterative":[194],"improvement":[195],"(77.0%).":[196],"same":[198],"also":[200],"improves":[201],"GPT-5.4":[202],"mini":[203],"GLM~5.1":[205],"45.0%":[207],"58.5%":[209],"60.0%":[211],"71.0%.":[213],"These":[214],"results":[215],"demonstrate":[216],"high-level":[219],"effective":[223],"mechanism":[226],"improving":[228],"repository-scale":[229],"agents.":[231]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-04T00:00:00"}