OpenAI President Greg Brockman said the company led a two-month effort to address two PHP flaws found using its AI models. PHP released fixes on October 21 after details leaked, ahead of a planned October 22 release. The flaws could let attackers run code on vulnerable servers.
Researchers at Calif found one version of the bug with OpenAI’s GPT-5.6 Sol in August; OpenAI found a fuller version in September. OpenAI said Wiz found both flaws independently. Brockman also proposed that authorized defenders, such as governments, scan for vulnerable servers and, in extreme cases, patch them remotely.
