> ## Documentation Index
> Fetch the complete documentation index at: https://docs.antigen.sh/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Change vulnerability status

> You cannot set the status to `verified`. Verification happens when an offensive agent retests a remediated vulnerability.



## OpenAPI

````yaml /api/openapi.yaml put /vulnerabilities/{id}/status
openapi: 3.1.0
info:
  title: Antigen API
  version: v1
  description: >-
    Use the Antigen API to manage targets, runs, vulnerabilities, evidence,
    reports, hooks, assets, and integrations.
servers:
  - url: https://api.antigen.sh/v1
    description: Production
security:
  - ApiKeyAuth: []
  - BearerAuth: []
  - SessionCookie: []
tags:
  - name: Authentication
  - name: API keys
  - name: Models
  - name: Agents
  - name: Targets
  - name: Runs
  - name: Vulnerabilities
  - name: Evidence
  - name: Reports
  - name: Hooks
  - name: Asset Map
  - name: Integrations
paths:
  /vulnerabilities/{id}/status:
    put:
      tags:
        - Vulnerabilities
      summary: Change vulnerability status
      description: >-
        You cannot set the status to `verified`. Verification happens when an
        offensive agent retests a remediated vulnerability.
      operationId: updateVulnerabilityStatus
      parameters:
        - $ref: '#/components/parameters/VulnerabilityId'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
                - status
              properties:
                status:
                  type: string
                  enum:
                    - open
                    - in_progress
                    - remediated
                    - accepted_risk
      responses:
        '200':
          description: Vulnerability status updated.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VulnerabilityStatusUpdate'
components:
  parameters:
    VulnerabilityId:
      name: id
      in: path
      required: true
      schema:
        type: string
        format: uuid
  schemas:
    VulnerabilityStatusUpdate:
      type: object
      required:
        - id
        - status
        - previous_status
        - updated_at
      properties:
        id:
          type: string
          format: uuid
        status:
          $ref: '#/components/schemas/VulnerabilityStatus'
        previous_status:
          $ref: '#/components/schemas/VulnerabilityStatus'
        updated_at:
          $ref: '#/components/schemas/Timestamp'
    VulnerabilityStatus:
      type: string
      enum:
        - open
        - in_progress
        - remediated
        - verified
        - accepted_risk
    Timestamp:
      type: string
      format: date-time
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: x-api-key
      description: API key from the Antigen dashboard.
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: access token
      description: Better Auth access token.
    SessionCookie:
      type: apiKey
      in: cookie
      name: better-auth.session_token
      description: Better Auth browser session cookie.

````