AI · SEMICONDUCTOR · FACT CHECK

SKD WIRE

EN WIRE · 2026-10-05 23:09

Google Temporarily Suspends Open Source Bug Bounty Program Amid Flood of AI-Generated Fake Reports

Mostly True

Google Temporarily Suspends Open Source Bug Bounty Program Amid Flood of AI-Generated Fake Reports
Image source: 조사 출처

Google has temporarily suspended part of its open source bug bounty program after a surge of low-quality, AI-generated vulnerability reports overwhelmed reviewers, according to multiple primary sources reviewed in connection with the claim.

원문 주장 (KR)
AI가 쏟아낸 '엉터리 제보'에... 구글, 오픈소스 버그 바운티 일시 중단

AI-Generated Noise Floods Bug Reports

The claim states that Google paused its open source bug bounty program after being inundated with "bogus" submissions produced by AI. The evidence supports this core assertion: the suspension was temporary, and the immediate trigger was a wave of automated or AI-assisted reports that did not meet the bar of genuine, exploitable vulnerabilities.

Google's bug bounty programs reward security researchers who responsibly disclose flaws. The influx of AI-generated reports — often superficially plausible but lacking technical substance — strained the review pipeline and prompted the temporary halt of the open source component.

What Remains Unconfirmed

Details such as the precise duration of the suspension, the exact volume of AI-generated submissions, and whether the suspension applies to Google's other bounty programs are not established in the available material. The company's broader response and any long-term changes to submission screening remain to be seen.

Conclusion

Google did temporarily suspend its open source bug bounty program in response to a flood of AI-generated fake vulnerability reports, though the finer details of the pause remain unclear — the claim is Mostly True.

Sources — primary documents (11)
  1. https://bughunters.google.com/about/rules/open-source/google-open-source-software-vulnerability-reward-program-rules
  2. https://web.archive.org/web/20261005122638/https://bughunters.google.com/about/rules/open-source/google-open-source-software-vulnerability-reward-program-rules
  3. https://x.com/GoogleVRP/status/2105689195180179605
  4. https://web.archive.org/web/20261004115339/https://x.com/GoogleVRP/status/2105689195180179605
  5. https://techcrunch.com/2026/10/04/google-froze-its-open-source-bug-bounty-program-due-to-a-significant-rise-in-ai-submissions/
  6. https://www.tomshardware.com/tech-industry/artificial-intelligence/google-suspends-part-of-the-oss-vrp-bug-bounty-program-due-to-an-influx-of-invalid-ai-submissions-product-vulnerability-submissions-ended-october-1
  7. https://www.bleepingcomputer.com/news/google/google-halts-open-source-bug-bounty-program-amid-ai-spam-surge/
  8. https://security.googleblog.com/2023/08/Announcing-Googles-Open-Source-Software-Vulnerability-Rewards-Program%20.html
  9. https://bughunters.google.com/static/icon-192.png
  10. https://storage.googleapis.com/bughunters-social/og_social_image_bughunters.png
  11. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYIUyQJtaAY06QUHFJwNJq_G2-GyovxH4kqwBEFS_WweUghi5Qkid_Mrt9Qa65XBQ254P_EMWHpRQWIV17U_oQgEyStBSHWel9v8hHlWeP4ncr9BBtfD6QUhjhPlcISln2jWWNWgf2Ol-P/s1600/googlelogo_color_200x200.png

KR: /news/20261005-8d1f09 · 판정: 대체로 사실