MultiVer: Zero-Shot Multi-Agent Vulnerability Detection
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
We present MultiVer, a zero-shot multi-agent system for vulnerability detection that achieves state-of-the-art recall without fine-tuning. A four-agent ensemble (security, correctness, performance, style) with union voting achieves 82.7% recall on PyVul, exceeding fine-tuned GPT-3.5 (81.3%) by 1.4 percentage points -- the first zeroshot system to surpass fine-tuned performance on this benchmark. On SecurityEval, the same architecture achieves 91.7% detection rate, matching specialized systems. The recall improvement comes at a precision cost: 48.8% precision versus 63.9% for fine-tuned baselines, yielding 61.4% F1. Ablation experiments isolate component contributions: the multi-agent ensemble adds 17 percentage points recall over single-agent security analysis. These results demonstrate that for security applications where false negatives are costlier than false positives, zero-shot multi-agent ensembles can match and exceed fine-tuned models on the metric that matters most.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 4 of its 16 references that are in the map. First posted on arXiv 19 Feb 2026.
Builds on
4 of 16 references.
References · 4
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,601
- 2017Billion-scale similarity search with GPUscited by 2,477
- 2025An Empirical Study of Vulnerabilities in Python Packages and Their Detectioncited by 2
- 2025Multi-Agent Code Verification via Information Theorycited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026Argus: Reorchestrating Static Analysis via a Multi-Agent Ensemble for Full-Chain Security Vulnerability Detection
- 2026MulVul: Retrieval-augmented Multi-Agent Code Vulnerability Detection via Cross-Model Prompt Evolution
- 2026Blind Spots in the Guard: How Domain-Camouflaged Injection Attacks Evade Detection in Multi-Agent LLM Systems
- 2026Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing
- 2026Towards Optimal Agentic Architectures for Offensive Security Tasks
- 2025BlindGuard: Safeguarding LLM-based Multi-Agent Systems under Unknown Attacks
- 2026Early Detection of Distributed Backdoors in Multi-Agent LLM Systems: A Characterization Study
- 2026Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming