Peter Steinberger reposted OpenAI, saying that GPT-5.6 Sol discovered a high-severity PHP vulnerability
Peter Steinberger reposted OpenAI's message, saying that the PHP vulnerability set to cause chaos this week was discovered by GPT-5.6 Sol. OpenAI said its model, as part of the Patch the Planet initiative, helped researchers discover critical security flaws in PHP, which is estimated to be used to run about 70% of websites; over the past two months, OpenAI worked with maintainers, researchers, and security vendors to prepare fixes and protections, the fix involved major changes to the PHP engine, and all sites using PHP can now upgrade to stay secure.
Why read this
SelectedAI score 76
OpenAI disclosed that its model discovered a high-severity vulnerability in PHP, offering a look at the practical process of AI participating in security discovery and remediation coordination.
Topics
View original postOpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. https://t.co/TW3jrSbB3f
View original
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. https://t.co/TW3jrSbB3f
Body
That PHP vulnerability that’s gonna cause havoc this week was found with… GPT‑5.6 Sol.