GPT-5.6 Sol reportedly helped find a critical PHP flaw

OpenAI said a coalition of maintainers, researchers and security providers worked over the preceding two months to prepare protections ahead of disclosure. Its post estimates that PHP is used to run 70% of websites. OpenAI considers the vulnerabilities “one of the most impactful security issues in recent memory” and says that, to its knowledge, frontier AI found them before attackers did.

For organizations using PHP, OpenAI’s guidance is to apply the fixes. It is sharing a PHP version checker and says an accompanying Codex skill will launch later. OpenAI says operators can use the checker alongside guidance from PHP and their providers to determine which updates apply.