Skip to content
Latent Space

OpenAI's Patch the Planet and Wiz independently find PHP2Shell flaw, coordinate fix over about two months

[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months

Researchers at Calif found the PHP2Shell vulnerability using GPT-5.6 Sol inside OpenAI's Patch the Planet project, and Wiz independently found the same defect. OpenAI coordinated the fix with the PHP ecosystem over roughly two months, extending model-assisted bug hunting into patch engineering, detection and deployment hardening.

Why it matters: It shows model-assisted vulnerability discovery moving past the find into coordinated patching, detection and deployment defense across the PHP ecosystem.

Read the original ↗Export Markdown