---
title: "GET /vlai/attack-techniques/{technique_id}/vulnerabilities"
method: GET
path: "/vlai/attack-techniques/{technique_id}/vulnerabilities"
tags: ["vlai"]
---

# GET /vlai/attack-techniques/{technique_id}/vulnerabilities

`GET /vlai/attack-techniques/{technique_id}/vulnerabilities`

## Request

- Base URL: `/api` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/vlai/attack-techniques/{technique_id}/vulnerabilities`
- Auth: API key in header `X-API-KEY`

Vulnerabilities whose description is nearest to one MITRE ATT&CK technique in the CIRCL bi-encoder space, best first. A similarity search over the indexed descriptions, not a classification: only the vulnerability -> technique direction has measured accuracy. `in_vocabulary` is false for techniques the model was not trained on, which rank noticeably worse. `score` is the training-time probability sigmoid(logit_scale * cosine + logit_bias).

## Query parameters

- `top_k` integer

## Response `200`

Success.

## Other responses

- `400`: Invalid technique id or top_k.
- `404`: Unknown technique.
- `500`: Unexpected error.
- `502`: Bad content: Invalid response from ML-Gateway.
- `503`: Connection Error: Unable to reach ML-Gateway.

## Changes

- **2026-09-16** `659b36930291`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/changes/vlai/attack-techniques/:technique_id/vulnerabilities/get.md)

---

[API](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api.md) - [All operations](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/llms.txt) - [OpenAPI document](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/revisions/b4dedf027493?raw)