Decoder: OpenAI GPT-5.6 Sol and Gemini 4 Argon found critical PHP flaw affecting millions of sites
THE DECODER reports that OpenAI’s GPT-5.6 Sol found a critical PHP vulnerability in the Patch the Planet effort—called one of the most impactful security issues in recent memory—while Wiz independently found the same flaw with Gemini 4 Argon; millions of sites may be affected, and the fix was coordinated over two months in five phases.
THE DECODER reports that AI models from OpenAI and Google found a critical PHP vulnerability that could affect millions of websites worldwide. GPT-5.6 Sol tracked down the flaw as part of the Patch-the-Planet initiative, which OpenAI calls one of the “most impactful security issues in recent memory,” the outlet writes; the model spotted the vulnerabilities before attackers did, giving developers and security vendors a window to respond. A tool on GitHub now lets server operators check whether their PHP version is affected, according to the report.
Security firm Wiz found the same flaws independently using its Wiz Atlas platform alongside Google’s Gemini 4 Argon and GPT-5.6 Sol, Decoder says. Gemini 4 Argon proved especially useful for finding the vulnerability, developing exploits, building attack detection, and validating the patch, according to Wiz as quoted in the article. Wiz also argues that large language models remove the old barrier of adapting an exploit across PHP versions, configurations, and memory layouts, which “significantly lowers the barrier to scaling attacks across different deployments” and can turn once-impractical vulnerabilities into viable targets.
The fix was coordinated over two months across five phases, involving PHP developers, Wiz, Cloudflare, and US agencies including CISA and the White House, Decoder reports; OpenAI is proposing the process as a repeatable framework for future AI-driven security discoveries. The company expects findings on the scale of the PHP2Shell flaw to “increase sharply in the coming months,” while warning that the same AI capabilities can help attackers too.