OpenAI led coalition to fix critical PHP2Shell vulnerability found by AI models

OpenAI President Greg Brockman stated that the company led a two-month coalition to mitigate the severe open-source software bug, php2shell, as part of its Patch the Planet initiative. A version of the bug was found by security firm Calif using GPT-5.6 Sol in August, and OpenAI's team found a fuller version in September. The flaws allowed code execution on servers running PHP, which powers about 70% of websites. This vulnerability caused governments in Finland, the Netherlands, and France to take government websites offline on Wednesday.