Google has temporarily suspended its Open Source Software Vulnerability Rewards Program starting October 1, 2026, due to an overwhelming increase in automated bug submissions generated by AI tools. The company noted that the surge, which they described as a "significant rise," consisted largely of invalid reports or those containing AI hallucinations, making it difficult for engineers and open source maintainers to effectively process valid vulnerabilities. This pause is set to last until an update is provided in the first quarter of 2027.

The bug bounty program, which rewards researchers who identify security flaws in Google’s open source software, has been negatively impacted by what Google refers to as "AI slop," an issue already flagged by cybersecurity experts last year. These low-quality or false AI-generated submissions have burdened the program, reducing its efficiency and the ability to focus on genuine security threats. This problem highlights the challenge of managing the influx of AI-driven content in technical security initiatives.

Google encouraged participants affected by the pause to explore its other bug bounty programs, which remain active. The company did not disclose specific plans for addressing or reforming the open source bug bounty approach but emphasized that it is committed to resuming the program once it can better handle the volume and quality of incoming submissions. The firm’s statement acknowledged the need for improved moderation and filtering to maintain the program’s integrity and effectiveness.

This development reflects a broader trend in the tech industry, where the rapid adoption of AI tools has complicated traditional processes like vulnerability reporting and software auditing. Google’s decision to freeze this specific bug bounty program underscores the impact of AI on cybersecurity workflows and the ongoing struggle to balance automation benefits with the management of erroneous or misleading AI outputs. The industry will be watching closely as Google and others adapt to these new challenges.