An AI code review bot rejects a security fix by inventing a CVE that does not exist

On October 29, 2026, Docker recounted how a code review bot running locally through Ollama refused a routine PostgreSQL version bump by citing a CVE that was never issued. The lesson applies to any team wiring an AI agent into its pipeline: an agent’s output is untrusted input, to be labeled and verified as such.