OpenAI discloses php2shell, a critical PHP flaw found by GPT models affecting ~70% of websites
gabrielchua · x · 2026-10-21
OpenAI's 'Patch the Planet' initiative used GPT models to discover php2shell, one of the most critical PHP vulnerabilities in recent years — PHP powers an estimated 70% of websites.
Key facts
- Eric Wallace says internal frontier models were used to systematically find and fix security vulnerabilities, similar to prior work on math
- The fix required a major change to the PHP engine, so OpenAI spent two months leading a coalition of maintainers, researchers, and security vendors to prepare patches
- Issues were confidentially disclosed to governments and external agencies ahead of time
- Every PHP site can now upgrade to stay secure; vendors also offer mitigations
A landmark case of models not just finding flaws but driving full patching and detection infrastructure.
Related event: OpenAI Models Uncover Critical PHP Flaws Affecting ~70% of Websites(51 posts)→
More from Models
- Recursive's Flint: automated research builds open local coding model, lm_head at 4-bit — _rockt · 2026-10-22
- OpenAI models now on Azure and AWS, coming soon to Google Cloud — romainhuet · 2026-10-22
- Flint cuts bike-demand validation RMSLE 30.8% in 3 hours of autonomous model iteration — cong_ml · 2026-10-22
- Running an autonomous research loop locally with Recursive Flint, from scheduling to bike-demand forecasting — cong_ml · 2026-10-22
- Developer calls out Grok's context bloat: no trimming, no window awareness — alexcovo_eth · 2026-10-22
- Grok's in-tweet chat takes ~20s to first token, dev says Google AI search is faster — BraceSproul · 2026-10-22