OpenAI Wants to ‘Patch the Planet’ (With Its Own AI)

Headline from Gizmodo · compiled from 6 sources

OpenAI says its models helped researchers discover critical security flaws in PHP[1]

According to Gizmodo, the PHP flaws, known as PHP2Shell, were reportedly discovered using OpenAI's GPT-5.6 Sol[2]. Gizmodo reports that, if exploited, the flaws would allow hackers to take control of web servers[3].OpenAI says that Calif identified a critical flaw using GPT‑5.6 Sol as part of our Patch the Planet initiative, with Wiz also independently discovering and reporting both vulnerabilities[4]. The company wrote on X that it considers the bug "one of the most impactful vulnerabilities in recent memory."[1]Gizmodo reports that OpenAI's proposal sketches out a blueprint for cybersecurity professionals to coordinate and find solutions with vulnerable organizations, government agencies, and other concerned parties[3]. According to Gizmodo, OpenAI would devote $1 billion to subsidize access to Daybreak, its cybersecurity auditing platform[3]. Data Studios notes that this is not a $1 billion cash grant[5].Gizmodo also reports that OpenAI warned the PHP issues were "among several significant vulnerabilities" it has already found, "and we expect similar findings to increase sharply in the coming months."[2]AI Weekly reports that the program's dashboard shows 68 codebases under review, 1,995 issues found, 679 patches written, and 466 accepted upstream as of October 21[6].Data Studios reports that Patch the Planet was originally introduced on June 22, 2026.[5] In Gizmodo's view, OpenAI is framing itself as a modernizing force[3].

Listen to the songAI News — October 22, 2026

Sources

  1. [1]OpenAI on X: "OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and s… / X
  2. [2]OpenAI Wants to ‘Patch the Planet’ (With Its Own AI) - AOL
  3. [3]OpenAI Wants to ‘Patch the Planet’ (With Its Own AI)
  4. [4]Patch the Planet: global response coordination as agents uncover critical vulnerabilities | OpenAI
  5. [5]OpenAI Patch the Planet: AI Agents, PHP Flaws and Global Cybersecurity
  6. [6]OpenAI Patch the Planet logs 1,995 issues, 466 merged upstream | AI Weekly

Every sentence here reports what a named outlet said, with a link to it. Compiled by 93 from the reporting below.

More in this topic

This topic, day by day

OpenAI Wants to ‘Patch the Planet’ (With Its Own AI) | 93