# OpenAI details autonomous pipeline that found 948 Linux privilege-escalation flaws in one 1.2M dollar run > Source: > Published: 2026-11-05 03:15:19+00:00 ๐Ÿ“… November 4, 2026 โ€ข openai.com OpenAI has published details of an **autonomous vulnerability-discovery pipeline** that completed a large-scale security review of the Linux kernel in a single automated run. The system is powered by an **upcoming cyber model** that the company has not yet named. It moves through four defined stages: **discovery, dynamic validation, exploitability assessment and patch generation**. Each stage hands its output to the next, so a flaw surfaced by the discovery module is confirmed, classified, assessed for exploitability and paired with a fix without human involvement until the final review gate. In practice that means every reported finding arrives with its full validation and patching history attached. The run took place in **mid-October** against a stock desktop Linux distribution inside a controlled, **isolated research environment**. Per OpenAI, this was a laboratory exercise rather than a response to attacks in the wild, and **no live system was breached** at any point. All of this happened against the packaged distribution as shipped, not a specially prepared target. The pipeline surfaced **2,308 candidate kernel findings**. Dynamic validation reproduced **1,724** of them as genuine vulnerabilities. The exploitability assessment produced **291 proofs of concept** for information leaks. The final stage delivered **948 working local privilege-escalation exploits**, and each of them ships with a **candidate patch**, a root-cause analysis and a minimal crashing proof of concept. The economics of the run are as notable as the technical results. Per OpenAI, the full campaign cost **$1,213,430** in API credits, which works out to roughly **$1,279 per working exploit**. Those two figures give security teams something they rarely have in writing: a budget line that converts into a known number of reproduced, documented and patchable kernel flaws, each documented well enough for a maintainer to act on. Human researchers stay in the loop at the end of the pipeline. Per OpenAI, **every output is reviewed before any report leaves the lab**, so nothing reaches maintainers or partners without human sign-off. Reporting started with the most critical vulnerabilities, in line with **Linux kernel community guidance**, and disclosure is coordinated through **Patch the Planet** partners. The work expands the **June 2026 Patch the Planet** effort, in which **GPT-5.5 Cyber** produced **24 Linux kernel local privilege-escalation exploits**. The new run delivers roughly **forty times** that output. All patches produced by the pipeline remain candidates until they pass through normal upstream maintainer review, where the usual kernel patch process takes over. IMPACT: Security research is turning into a **systematic, budgeted pipeline** โ€” generate, reproduce, prove, patch, and only then a **human gate**. For kernel maintainers that means rising patch velocity on long-tail flaws that once waited years for attention, with candidate patches arriving through the normal upstream review process rather than around it. Sources: openai.com Confirmations could not be found at this time. **Sources:** **Continue the conversation:** [https://t.me/AIAutomationArchitecture](https://t.me/AIAutomationArchitecture) ยท [Bluesky](https://bsky.app/profile/delimitter.bsky.social)