{"slug": "openai-models-helped-find-two-critical-php-flaws-affecting-web-servers", "title": "OpenAI models helped find two critical PHP flaws affecting web servers", "summary": "PHP maintainers released fixes on October 21st for two critical unauthenticated remote-code-execution flaws in the widely deployed runtime, following a two-month coordinated remediation effort, according to OpenAI, whose models helped researchers find the vulnerabilities. The flaws could let an unauthenticated attacker run code with the privileges of a PHP web worker. The disclosure shows AI-assisted discovery must be paired with validated findings, coordinated fixes and operator updates to reduce risk.", "body_md": "# OpenAI models helped find two critical PHP flaws affecting web servers\n\n**PHP released fixes on October 21st for two unauthenticated remote-code-execution flaws, after a two-month coordinated remediation effort.**\n\n        By [Ryan Merket](https://runtimewire.com/author/ryan-merket)\n        · Published \n\nPrimary source: [X · @OpenAI](https://x.com/openai/status/2112907856018309586?s=46)\n\n## Why it matters\n\nThe flaws affect a widely deployed runtime, and the disclosure shows that AI-assisted discovery must be followed by validated findings, coordinated fixes and operator updates to reduce risk.\n\nOpenAI says its models helped researchers find two critical remote-code-execution flaws in PHP, vulnerabilities PHP maintainers patched on October 21st after a two-month coordinated effort with researchers, maintainers and security providers. The fixes address flaws that could let an unauthenticated attacker run code with the privileges of a PHP web worker.…\n\nWhen you purchase through links in our articles, [we may earn a small commission](https://runtimewire.com/affiliate-monetization-standards). This doesn’t affect our editorial independence.", "url": "https://wpnews.pro/news/openai-models-helped-find-two-critical-php-flaws-affecting-web-servers", "canonical_source": "https://runtimewire.com/article/openai-ai-assisted-php-critical-vulnerabilities", "published_at": "2026-10-21 14:09:43+00:00", "updated_at": "2026-10-21 17:12:29.533738+00:00", "lang": "en", "topics": ["ai-safety", "artificial-intelligence"], "entities": ["OpenAI", "PHP"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/openai-models-helped-find-two-critical-php-flaws-affecting-web-servers", "markdown": "https://wpnews.pro/news/openai-models-helped-find-two-critical-php-flaws-affecting-web-servers.md", "text": "https://wpnews.pro/news/openai-models-helped-find-two-critical-php-flaws-affecting-web-servers.txt", "jsonld": "https://wpnews.pro/news/openai-models-helped-find-two-critical-php-flaws-affecting-web-servers.jsonld"}}