From Mashable · Chance Townsend · · 1m 10s
OpenAI Finds PHP Flaws Shaking Internet
OpenAI's AI models helped uncover critical PHP security flaws now scrambling websites worldwide.
In brief
OpenAI's AI models helped uncover critical PHP security flaws now scrambling websites worldwide. OpenAI's AI models found PHP vulnerabilities that could let attackers take over servers, prompting urgent fixes. Originally reported by Mashable.
OpenAI Uncovered PHP Flaws

OpenAI says its AI models helped find critical PHP security flaws that have websites across the internet scrambling.
Flaws Nicknamed PHP2SHELL
The vulnerabilities, now called 'PHP2SHELL', could let attackers take over servers running php, the programming language behind a large share of the web.
OpenAI's Role in Discovery
Security firm Calif used OpenAI's GPT-5.6 Sol model to find one critical flaw as part of Patch the Planet, an openai security program.
Timeline of Flaw Discovery

The bug existed in php for 14 years, with a smaller version found in 2024 but not treated as serious until august.
Early Fixes and Leaks
PHP maintainers released fixes a day earlier than planned after details leaked, despite two months of preparation.
OpenAI's Future Plans
OpenAI says it will find more vulnerabilities and has committed $1 billion for security tools to protect essential services.
What matters most
OpenAI's AI models found PHP vulnerabilities that could let attackers take over servers, prompting urgent fixes.




