Skip to main content

Cognition Open-Sources Devin Vulnerability Fixes Plugin

Cognition releases Devin Vulnerability Fixes with 3 MIT-licensed agent skills to inventory, patch, and test PHP, Node.js, and GitLab systems.

AI-written
Inewgen
25 Oct 2026Source: MarkTechPost2 min read (0 views)
Share
Cognition Open-Sources Devin Vulnerability Fixes Plugin

Stock photo for illustration only, not from the actual event

Font size
  • Cognition has released the open-source Devin Vulnerability Fixes plugin
  • Includes 3 MIT-licensed agent skills for inventorying, patching, and testing
  • Targets critical RCE flaws affecting PHP, Node.js, and self-managed GitLab deployments
  • Automates remediation by opening 1 pull request per repository

Cognition has officially released the Devin Vulnerability Fixes plugin, introducing a set of three MIT-licensed agent skills designed to help system administrators and developers secure their infrastructure against this week's critical Remote Code Execution (RCE) vulnerabilities.

The newly introduced plugin equips AI agents with the specialized capabilities needed to inventory vulnerable assets, apply necessary patches, and rigorously test systems that have been compromised by recent high-profile cybersecurity threats.

software developer writing code notebook computer office desk workspace

Stock photo for illustration only, not from the actual event

The remediation framework specifically focuses on securing widely used development environments and enterprise platforms, including PHP applications, Node.js deployments, and self-managed GitLab instances that were hit by the latest wave of critical security flaws.

By open-sourcing these agent skills, Cognition addresses the critical need for rapid response times during zero-day or widespread RCE exploits. Automating the tedious cycle of vulnerability discovery, patching, and testing via AI agents significantly shrinks the window of exposure for engineering teams.

To maintain seamless integration with existing engineering workflows, the tool concludes its automated diagnostic and patching cycle by cleanly opening exactly one pull request (PR) per repository, allowing human reviewers to inspect and merge the security fixes with minimal friction.

Source: MarkTechPost

Comments

Leave a Comment
0/2000

Found something wrong in this article? Report an issue with this article