OpenAI coordinates fixes for critical PHP flaws found with GPT-5.6
Original title: OpenAI: Patch the Planet. Global response coordination as AI uncovers PHP vulns
Calif used GPT-5.6 Sol and Wiz independently reported both flaws; maintainers led the fixes and a version checker is available.
OpenAI says a two-month coalition addressed critical vulnerabilities in PHP, which runs many websites and web applications. Calif found a critical flaw with GPT-5.6 Sol under Patch the Planet, while Wiz independently discovered and reported both vulnerabilities. PHP maintainers led the fixes, with Wiz, Cloudflare, and others helping prepare protections before disclosure. OpenAI urges organizations to apply the fixes, offers a PHP version checker, and describes a proposed multi-stage response framework, including outreach to U.S. agencies.
Unconfirmed: The post does not name CVEs or affected versions, and OpenAI says only that, to its knowledge, attackers had not found the flaws first.
- OpenAI says it engaged the White House, ONCD, CISA, and international partners.
- A Codex skill is planned to help identify potentially vulnerable PHP versions.
- OpenAI says it committed $1 billion in subsidized Daybreak access for frontline defenders.
- The post says similar AI-found vulnerabilities are expected to increase in coming months.
Impact: Critical flaws in widely used PHP, details not specified
| Product | Affected |
|---|---|
| PHP | — |
- 1.Apply the PHP maintainer fixes.
- 2.Use the published PHP version checker to find potentially vulnerable versions.
- Products
- PHP
- Organizations
- OpenAIWizCloudflareCISAONCD
- Countries
- United States
- AI models
- GPT-5.6 Sol
From the original article
8 min read at openai.com
Over the past two months, we led a coalition of maintainers, researchers, and security providers to address critical vulnerabilities in PHP, an open-source programming language used to run websites and web applications. Calif identified a critical flaw using GPT‑5. 6 Sol as part of our Patch the Planet (opens in a new window) initiative, with Wiz also independently discovering and reporting both vulnerabilities.
By nr378 · openai.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.