Skip to content
NewA calmer, faster ZeroHour

GPT-5.6 Sol and Gemini 4 Argon found a critical PHP flaw

Original title: OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon found critical PHP flaw affecting millions of websites

The Decoderby Matthias Bastian ()1 min read1 · 1 read
Part of a story covered by 10 sourcesPHP patches PHP2Shell flaws as exploit attempts and exposure continueMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

OpenAI says the models found the issues before attackers, and a GitHub tool checks whether a PHP version is affected.

GPT-5.6 Sol found the flaws in OpenAI's Patch-the-Planet initiative. Wiz reports finding the same issues independently with Wiz Atlas, Gemini 4 Argon, and GPT-5.6 Sol, and says Gemini 4 Argon helped develop exploits, detection, and patch validation. A two-month, five-phase fix involved PHP developers, Wiz, Cloudflare, CISA, and the White House. Wiz warns that models can adapt exploits across PHP versions, configurations, and memory layouts.

Unconfirmed: The claim of millions of affected websites and OpenAI's 'most impactful' ranking are not independently quantified in the report.

Key facts
  • OpenAI calls it one of the most impactful security issues in recent memory.
  • Wiz says Gemini 4 Argon helped develop exploits and validate the patch.
  • Coordination lasted two months and ran through five phases.
  • OpenAI expects PHP2Shell-scale findings to rise sharply in coming months.
Security assessment · AI, from the articleNo known exploitation

Impact: Critical PHP flaw that could affect millions of websites

ProductAffected
PHP—
What to do
  1. 1.Use the published GitHub tool to check whether the PHP version is affected.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

1 min read at the-decoder.com

OpenAI's GPT-5. 6 Sol discovered a critical PHP vulnerability as part of the Patch the Planet initiative that could affect millions of websites. Security firm Wiz independently found the same flaw using Google's Gemini 4 Argon.

The Decoder

By Matthias Bastian · the-decoder.com

Read the full article at The Decoder

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.