OpenAI Patch the Planet: global response coordination after agents discover high-severity vulnerabilities
Patch the Planet: global response coordination as agents uncover critical vulnerabilities
OpenAI said that in the Patch the Planet program, Calif used GPT-5.6 Sol to discover a high-severity vulnerability in PHP, Wiz also independently discovered and reported these two vulnerabilities, and PHP maintainers led the fix and release. OpenAI coordinated with partners including Wiz and Cloudflare as well as U.S. government agencies to prepare protections before disclosure, and proposed a five-stage response framework covering verifying and fixing upstream vulnerabilities, enabling affected organizations to prepare in advance, cooperating with governments, preparing product updates, and publishing deployment guidance. OpenAI also committed to providing $1 billion in subsidized access credits through Daybreak for Frontline Defenders, and expects similar high-severity discoveries to increase substantially in the coming months.
OpenAI reviewed how AI models discovered a high-severity PHP vulnerability and drove coordinated disclosure, and the five-stage framework it proposed can serve as a reference for maintainers on response roles and timing.