From the source
OpenAI says it led a coalition of maintainers, researchers and security providers to fix critical vulnerabilities in PHP, the open-source language used to run websites and web applications.
- Calif found a critical flaw using GPT-5.6 Sol as part of OpenAI's Patch the Planet initiative, and Wiz independently discovered and reported both vulnerabilities, while PHP's maintainers led the fixes and release.
- OpenAI says the priority for organizations using PHP is applying the fixes, and it is sharing a PHP version checker and will launch an accompanying Codex skill to help operators identify potentially vulnerable versions.
- The company calls the flaws among the most impactful security issues in recent memory and says that, to its knowledge, frontier AI found them before attackers did, opening a Defender's Window for maintainers and providers.
- OpenAI has committed $1 billion in subsidized Daybreak access through Daybreak for Frontline Defenders, aimed at organizations with limited security resources protecting essential services.
- It is also proposing a five-stage framework for responding to critical vulnerabilities in widely used software and asking the security community to help improve it.
