Correct Verdicts, Flawed Reasoning: Structured Auditing of LLM-Based Vulnerability Reasoning

Large Language Models LLMs are increasingly deployed for automated software vulnerability analysis. Binary classification alone is insufficient; practitioners need explanations to triage bugs and engineer patches. Standard practice relies on Chain-of-Thought CoT prompting, but free-form reasoning...