AI models find internet-scale PHP flaws — with a contested model attribution
From the AI digest for 2026-10-21
What happened: OpenAI announced (~10:04 AM ET, October 21, 2026 — https://x.com/OpenAI/status/2112907856018309586) that its models, working as part of the company's "Patch the Planet" initiative, helped researchers discover critical security flaws in PHP, the open-source language running an estimated 70% of websites. Over two months, OpenAI says it led a coalition of maintainers, researchers, and security providers to prepare fixes ahead of disclosure, because the repair "required a major change to the PHP engine"; every PHP site can now safely upgrade, and OpenAI calls the bug "one of the most impactful vulnerabilities in recent memory" and an example of the "Defender's Window in action" — frontier AI finding the vulnerability ahead of attackers. A follow-up company post (~12:35 PM ET — https://x.com/OpenAI/status/2112945805686604033) points concerned site owners at a packaged Codex skill and checker repo (https://github.com/openai/php2shell-checker). Independent framing arrived via a Google DeepMind retweet of Raluca Ada Popa (~11:31 AM ET — https://x.com/GoogleDeepMind/status/2112942536553599429) naming "PHP2Shell — CVSS 10 vulnerabilities in core PHP affecting 70% of the web," discovered by Wiz Research, and describing Gemini 4 Argon as having "found the vulnerability, developed the complex exploit chain, created attack detectors and validated the patch," with Wiz's writeup linked (https://www.wiz.io/blog/php2shell-php-rce). Peter Steinberger's same-morning post (~10:25 AM ET — https://x.com/steipete/status/2112913060709228764) credits the find to "GPT-5.6 Sol" — a model name that appears in neither company's primary post.
What's genuinely new: A debut — the record carries OpenAI through its platform bundling, agent incidents, and the Navier–Stokes attribution fight, but has no thread on frontier-AI vulnerability discovery or coordinated disclosure; PHP2Shell arrives here first. Unlike the window's usual announced-not-shipped pattern, this item points at concrete artifacts — the disclosure page (https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/), the Wiz writeup, the checker repo — but none of their contents are captured, so the models' exact roles rest on the participants' own assertions. Those assertions do not reconcile: OpenAI credits its models as helping researchers, Popa's relay credits Gemini 4 Argon with the core discovery chain, and the "GPT-5.6 Sol" naming matches nothing in the primary posts.
Watch: the Wiz writeup and OpenAI's disclosure page for who found what with which model; whether exploitation appears in the wild before patched PHP versions propagate; whether "Patch the Planet" becomes a recurring disclosure vehicle.
Links: OpenAI on X · Google DeepMind RT of Raluca Ada Popa · OpenAI Codex-skill post · steipete on X