NIST describes an AI agent workflow it is building for the vulnerability database

The National Vulnerability Database is the U.S. government's public catalog of software flaws. Its analysts add severity scores, affected-product details and other context to each entry, a process known as enrichment, and security tools and compliance programs across government and industry draw on that data.

In the event notice, NIST said the growing number and complexity of reported vulnerabilities makes it hard for the database to deliver timely information users can act on, and that it has begun developing an agentic AI workflow to help. The hour-long virtual session, part of a webinar series from NIST's Information Technology Laboratory, was billed as covering the approach, the architecture, the issues discovered while building it and early results from using the tool at the database.

The notice lists NIST's Harold Booth and Derek Sappington as technical contacts. It does not say whether the workflow is in routine production use, and it does not describe how human analysts review the agent's output. Those details matter because errors in enrichment data would flow into the many scanners and dashboards that consume it.