@sawaba "it's a vulnerability that isn't useful to an attacker, but it still has a 9.8 CVSS even though its LPE and you collectively decide to trigger rapid response" -> IMO this means that your vuln management is...not great, probably because it relies on one-dimensional properties like CVSS too heavily. This problem predates LLMs by decades and has little to do with offensive research. We do tend to inflate our findings (I'm sorry and I try to work against that), but vuln mgmt shouldn't be based on marketing posts either.
btw
@gadi is here on Fedi :)