# OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon find critical PHP flaw

Digest AI · Research · published 2026-10-21T19:45:01Z

Canonical: https://digestai.news/story/openai-s-gpt-5-6-sol-and-google-s-gemini-4-argon-find-critical-php-fla

## Summary

OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon identified a critical PHP vulnerability that could affect millions of websites worldwide. The discovery was part of OpenAI's "Patch‑the‑Planet" initiative, which the company describes as one of the most impactful security issues in recent memory. A GitHub tool now lets server operators test whether their PHP version is vulnerable.

Security firm Wiz independently found the same flaws using its Wiz Atlas platform together with Gemini 4 Argon. According to Wiz, the AI models helped locate the vulnerability, craft exploits, build detection rules and validate patches. The fix was coordinated over two months in five phases, involving PHP developers, Wiz, Cloudflare, CISA and the White House. OpenAI proposes the coordinated process as a repeatable framework for future AI‑driven security discoveries, warning that the same capabilities could also aid attackers and that similar findings may increase sharply in the coming months.

## Key points

- GPT-5.6 Sol and Gemini 4 Argon uncovered a critical PHP vulnerability affecting millions of sites.
- Fix coordination spanned two months and five phases with PHP developers, Wiz, Cloudflare, CISA and the White House.
- Wiz says AI models lower the barrier for scaling PHP exploits, making previously impractical attacks viable.

## Why it matters

The case shows AI can accelerate security research while also making exploits easier, posing a dual risk for the billions of web services that rely on PHP.

## Sources

1. [OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon found critical PHP flaw affecting millions of websites](https://the-decoder.com/openais-gpt-5-6-sol-and-gemini-4-argon-discovered-the-critical-php-vulnerability-affecting-millions-of-websites) (The Decoder, 2026-10-21)
2. [Discovered by AI led by OpenAI: Critical PHP vulnerability 'PHP2Shell', site operators should update immediately](https://note.com/wing_sky_nine/n/n54fa4b710e5a?hl=en) (note.com, 2026-10-21)

Part of the developing story: [AI Models Expose Critical PHP Web Flaw](https://digestai.news/thread/php-discloses-php2shell-vulnerability-affecting-up-to-70-of-websites) (2 stories)

## Cite

Digest AI, "OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon find critical PHP flaw", 21 October 2026, https://digestai.news/story/openai-s-gpt-5-6-sol-and-google-s-gemini-4-argon-find-critical-php-fla

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/openai-s-gpt-5-6-sol-and-google-s-gemini-4-argon-find-critical-php-fla.json