Repairing Broken Access Control in Web Applications with LLMs: An Empirical Benchmark Study.

arXiv:2610.34290v1 Announce Type: cross Abstract: Broken access control (BAC) ranks among the most severe web-application vulnerability classes, yet its automated repair remains largely unexplored. Unlike memory-safety vulnerabilities, BAC is a logic vulnerabi