Veracode 2025 GenAI Code Security Report: 45% Fail Rate
Date: 2025-10
Affected: Multi-vendor LLMs (code generation)
Attack vector: supply-chain
Category: research
Severity: High

Veracode tested 100+ LLMs across Java/Python/C#/JS - 45% of generated code samples failed security tests introducing OWASP Top 10 vulnerabilities. Java showed 72% failure rate; XSS failed 86%; log injection 88%.


Mitigations:

Architectural layers (MAESTRO):