Skip to content
Safety

OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon found critical PHP flaw affecting millions of websites.

The DecoderIndependent reporting·
Corroborated event · 4 outlets

Security researchers used AI tools to uncover years-old vulnerabilities in the PHP scripting language, and cybersecurity leaders warned of a new era of AI-enabled hacking.

AI brief

OpenAI says its GPT-5.6 Sol model, working as part of the Patch the Planet initiative, found a critical PHP vulnerability that could affect millions of websites. Security firm Wiz reportedly found the same flaw independently using Google's Gemini 4 Argon, and OpenAI warns the same AI capability could be misused.

Why it matters: It shows AI models being used to find serious software vulnerabilities, while OpenAI cautions the same capability can be abused.

Written by AI from The Decoder's published text.

Background

From our own funding, model and news trackers, not from the source.

More coverage of this story (4)

Cybersecurity experts warn of AI-enabled hacking after PHP vulnerability

[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
Latent Space · 22 Oct 2026, 07:42
What is PHP and why did it spark a global cyber-security scramble?
BBC Technology · 22 Oct 2026, 03:48
PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
TechCrunch AI · 21 Oct 2026, 17:59
Websites taken down worldwide as critical cyber-security update issued
BBC Technology · 21 Oct 2026, 12:14

Primary source

“OpenAI's GPT-5.6 Sol discovered a critical PHP vulnerability as part of the Patch the Planet initiative that could affect millions of websites. Security firm Wiz independently found the same flaw using Google's Gemini 4 Argon.”
The Decoder, 21 Oct 2026, 19:45.

Reporting from a publisher outside the organisation being covered.

Read original story ↗