GoKawiilOpenAI's GPT-5.6 Sol AI model finds critical PHP flaws, patches now released
OpenAI says researchers using its GPT-5.6 Sol model under the 'Patch the Planet' program discovered critical vulnerabilities in PHP, the language that powers roughly 70% of websites. The PHP Foundation has issued patched versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12, though older PHP 8.1 and earlier releases won't be fixed. The coordinated disclosure was moved up a day to Oct. 21 after some details leaked publicly on Oct. 20.
GoKawiil's interpretation of the reporting above, not reported fact.
OpenAI frames the discovery as proof of its 'Defender's Window' idea, suggesting frontier AI can be used to find and fix flaws before the same capabilities fall into attackers' hands, though this framing comes from OpenAI itself and serves its narrative about AI safety. The fact that PHP maintainers reportedly knew of the underlying flaw since 2024 without finding a fix suggests AI tools may be accelerating vulnerability research in ways human teams alone could not match. Because so much of the web runs on PHP, unpatched legacy versions could remain an attractive target for attackers who eventually learn similar techniques.
- OpenAI's GPT-5.6 Sol model reportedly helped uncover critical PHP vulnerabilities affecting an estimated 70% of websites.
- Patched versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12 are available, but PHP 8.1 and older will not receive fixes.
- OpenAI cites the episode as evidence for its 'Defender's Window' concept, in which AI is used defensively before attackers gain similar capabilities.
Source: tomshardware.com — Etiido Uko, 2026-10-22
Published there as: “OpenAI says ChatGPT Sol helped uncover critical PHP flaws that could affect 70% of websites”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.