OpenAI GPT-5.6 Sol and Google Gemini 4 Argon discover severe PHP vulnerability affecting millions of websites

OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon discovered a critical PHP vulnerability affecting millions of websites worldwide before attackers did, and a tool is already available on GitHub for server operators to check whether their PHP version is affected. GPT-5.6 Sol discovered the vulnerability under OpenAI's Patch-the-Planet program, and OpenAI says it is one of the most significant security issues of recent times; security firm Wiz also independently discovered the same vulnerability using its own Wiz Atlas platform combined with these two models, and says Gemini 4 Argon was particularly useful in finding the vulnerability, developing exploit code, building attack detection and validating patches. Wiz notes that large language models can automatically adapt exploit code to different PHP versions, configurations and memory layouts, significantly lowering the barrier to expanding attacks across deployment environments.