GoKawiilGPT-5.6 Sol AI Model Uncovers Critical PHP Flaws Dating to 2004
Cybersecurity firm Calif used OpenAI's GPT-5.6 Sol model to discover two severe security vulnerabilities in PHP, the code powering roughly 70 percent of websites, reporting them to the PHP Foundation on August 11. Google-owned Wiz independently confirmed the flaws on August 24, calling them among the most severe in software history, and a patch was released Wednesday after sites including Wikipedia and Steam temporarily went offline.
GoKawiil's interpretation of the reporting above, not reported fact.
The flaws reportedly dated back to 2004, suggesting the AI model succeeded in finding bugs that had evaded human researchers for roughly two decades, which could point to AI tools becoming significant players in vulnerability research. The National Security Agency's advice to simply keep unpatched servers offline underscores how severe and widespread the exposure is considered, while the involvement of an AI company in discovering such a critical flaw has reportedly raised questions about oversight and disclosure practices.
- OpenAI's GPT-5.6 Sol model helped identify two severe PHP vulnerabilities affecting roughly 70 percent of websites.
- Wiz independently confirmed the flaws, calling them among the most severe in software history.
- The NSA advised organizations unable to patch immediately to keep affected servers offline.
Source: futurism.com — Frank Landymore, 2026-10-21
Published there as: “Frontier OpenAI Model Exposes Stunning Exploit That Leaves Millions of Web Servers Open to Attack”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.