wtf is local-vuln-research-pipeline?

LVRP is a tool that reads through a codebase and tries to find every security vulnerability in it, running entirely on your own computer instead of sending code to a cloud AI service. It works across sixteen programming languages and has been tested on projects ranging from small scripts up to huge codebases like the Linux Kernel and VSCode. The core idea is to build a map of the whole program: every function, every file, and every place data flows from one function to another. On that map, it marks every spot where untrusted input can enter the program, and every spot where a dangerous operation happens, such as running a system command or building a database query. It then traces every possible path between an entry point and a dangerous operation, following how data moves through each function along the way, and checks whether that data passes through anything that would clean or validate it first. Paths that are clearly blocked by a proper check are ruled out automatically. Paths that are unclear are handed to a locally run AI language model, which decides whether the vulnerability is genuinely exploitable. Files that are not touched by any of these paths still get a separate, file by file review so nothing is skipped. Known public vulnerability reports for the same product are fed into the AI's review as extra context, and for C, C++, and Rust code the pipeline also runs a dedicated memory safety analysis. Because the underlying code map is built the same deterministic way every time, the tool can promise it checked every path it found, while the AI model is only used to judge whether a specific, already traced path is really dangerous, not to search for problems on its own. The authors are upfront that some cases, like function calls resolved only at runtime or code inside assembly, cannot be fully analyzed and are instead flagged as uncertain rather than silently ignored. Running it requires a capable computer, since it downloads and runs a fourteen billion parameter code focused language model locally through llama.cpp, along with a full vulnerability database from the National Vulnerability Database that takes about forty five minutes to download the first time.