PHP released fixes on October 21st for two unauthenticated remote-code-execution flaws, after a two-month coordinated remediation effort.
By [Ryan Merket](https://runtimewire.com/author/ryan-merket)
· Published
Primary source: [X · @OpenAI](https://x.com/openai/status/2112907856018309586?s=46)
Why it matters #
The flaws affect a widely deployed runtime, and the disclosure shows that AI-assisted discovery must be followed by validated findings, coordinated fixes and operator updates to reduce risk.
OpenAI says its models helped researchers find two critical remote-code-execution flaws in PHP, vulnerabilities PHP maintainers patched on October 21st after a two-month coordinated effort with researchers, maintainers and security providers. The fixes address flaws that could let an unauthenticated attacker run code with the privileges of a PHP web worker.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.