OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon find critical PHP flaw
OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon identified a critical PHP vulnerability that could affect millions of websites worldwide. The discovery was part of OpenAI's "Patch‑the‑Planet" initiative, which the company describes as one of the most impactful security issues in recent memory. A GitHub tool now lets server operators test whether their PHP version is vulnerable.
Key points
- GPT-5.6 Sol and Gemini 4 Argon uncovered a critical PHP vulnerability affecting millions of sites.
- Fix coordination spanned two months and five phases with PHP developers, Wiz, Cloudflare, CISA and the White House.
- Wiz says AI models lower the barrier for scaling PHP exploits, making previously impractical attacks viable.
Security firm Wiz independently found the same flaws using its Wiz Atlas platform together with Gemini 4 Argon. According to Wiz, the AI models helped locate the vulnerability, craft exploits, build detection rules and validate patches. The fix was coordinated over two months in five phases, involving PHP developers, Wiz, Cloudflare, CISA and the White House. OpenAI proposes the coordinated process as a repeatable framework for future AI‑driven security discoveries, warning that the same capabilities could also aid attackers and that similar findings may increase sharply in the coming months.
Model pages: GPT-5.6 Sol → · Gemini 4 Argon →
The story so far
2 episodes →- OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon find critical PHP flawthis story
OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon found critical PHP flaw affecting millions of websites
The Decoder · 21 October 2026
Loading the full article…
This text was published by The Decoder and written by Matthias Bastian. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Research
All →- Nvidia's Astranomy study reaches 74.8% success in robot control with GPT-6 Astra · 1 src
- PHP discloses PHP2Shell vulnerability affecting up to 70% of websites · 8 src
- Ggml-org adds fused top‑k mask operation to llama.cpp · 1 src
- Microsoft Research says Xinzhi Zhang and Zhao Song prove KLS conjecture with AI · 1 src
- OpenAI announces improved COBOL building and migration capabilities · 1 src
Comments
via GitHub Discussions