{"slug": "openai-details-autonomous-pipeline-that-found-948-linux-privilege-escalation-in", "title": "OpenAI details autonomous pipeline that found 948 Linux privilege-escalation flaws in one 1.2M dollar run", "summary": "OpenAI published details of an autonomous vulnerability-discovery pipeline, powered by an unnamed upcoming cyber model, that completed a large-scale security review of the Linux kernel in a single automated run in mid-October. The four-stage system surfaced 2,308 candidate findings, reproduced 1,724 as genuine vulnerabilities, and produced 948 working local privilege-escalation exploits, each paired with a candidate patch, root-cause analysis and crashing proof of concept, at a cost of $1,213,430 in API credits, or roughly $1,279 per working exploit. The work expands the June 2026 Patch the Planet effort, in which GPT-5.5 Cyber produced 24 Linux kernel exploits, and every output is reviewed by humans before any report leaves the lab, with disclosure coordinated through Patch the Planet partners.", "body_md": "📅 November 4, 2026 • openai.com\n\nOpenAI has published details of an **autonomous vulnerability-discovery pipeline** that completed a large-scale security review of the Linux kernel in a single automated run. The system is powered by an **upcoming cyber model** that the company has not yet named. It moves through four defined stages: **discovery, dynamic validation, exploitability assessment and patch generation**. Each stage hands its output to the next, so a flaw surfaced by the discovery module is confirmed, classified, assessed for exploitability and paired with a fix without human involvement until the final review gate. In practice that means every reported finding arrives with its full validation and patching history attached.\n\nThe run took place in **mid-October** against a stock desktop Linux distribution inside a controlled, **isolated research environment**. Per OpenAI, this was a laboratory exercise rather than a response to attacks in the wild, and **no live system was breached** at any point. All of this happened against the packaged distribution as shipped, not a specially prepared target. The pipeline surfaced **2,308 candidate kernel findings**. Dynamic validation reproduced **1,724** of them as genuine vulnerabilities. The exploitability assessment produced **291 proofs of concept** for information leaks. The final stage delivered **948 working local privilege-escalation exploits**, and each of them ships with a **candidate patch**, a root-cause analysis and a minimal crashing proof of concept.\n\nThe economics of the run are as notable as the technical results. Per OpenAI, the full campaign cost **$1,213,430** in API credits, which works out to roughly **$1,279 per working exploit**. Those two figures give security teams something they rarely have in writing: a budget line that converts into a known number of reproduced, documented and patchable kernel flaws, each documented well enough for a maintainer to act on.\n\nHuman researchers stay in the loop at the end of the pipeline. Per OpenAI, **every output is reviewed before any report leaves the lab**, so nothing reaches maintainers or partners without human sign-off. Reporting started with the most critical vulnerabilities, in line with **Linux kernel community guidance**, and disclosure is coordinated through **Patch the Planet** partners.\n\nThe work expands the **June 2026 Patch the Planet** effort, in which **GPT-5.5 Cyber** produced **24 Linux kernel local privilege-escalation exploits**. The new run delivers roughly **forty times** that output. All patches produced by the pipeline remain candidates until they pass through normal upstream maintainer review, where the usual kernel patch process takes over.\n\nIMPACT: Security research is turning into a **systematic, budgeted pipeline** — generate, reproduce, prove, patch, and only then a **human gate**. For kernel maintainers that means rising patch velocity on long-tail flaws that once waited years for attention, with candidate patches arriving through the normal upstream review process rather than around it.\n\nSources: openai.com\n\nConfirmations could not be found at this time.\n\n**Sources:**\n\n**Continue the conversation:** [https://t.me/AIAutomationArchitecture](https://t.me/AIAutomationArchitecture) · [Bluesky](https://bsky.app/profile/delimitter.bsky.social)", "url": "https://wpnews.pro/news/openai-details-autonomous-pipeline-that-found-948-linux-privilege-escalation-in", "canonical_source": "https://dev.to/delimitter/openai-details-autonomous-pipeline-that-found-948-linux-privilege-escalation-flaws-in-one-12m-1p3h", "published_at": "2026-11-05 03:15:19+00:00", "updated_at": "2026-11-05 03:23:05.971728+00:00", "lang": "en", "topics": ["ai-safety", "artificial-intelligence", "large-language-models", "ai-agents"], "entities": ["OpenAI", "Linux", "GPT-5.5 Cyber", "Patch the Planet"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/openai-details-autonomous-pipeline-that-found-948-linux-privilege-escalation-in", "markdown": "https://wpnews.pro/news/openai-details-autonomous-pipeline-that-found-948-linux-privilege-escalation-in.md", "text": "https://wpnews.pro/news/openai-details-autonomous-pipeline-that-found-948-linux-privilege-escalation-in.txt", "jsonld": "https://wpnews.pro/news/openai-details-autonomous-pipeline-that-found-948-linux-privilege-escalation-in.jsonld"}}