# OpenAI models helped find two critical PHP flaws affecting web servers > Source: > Published: 2026-10-21 14:09:43+00:00 # OpenAI models helped find two critical PHP flaws affecting web servers **PHP released fixes on October 21st for two unauthenticated remote-code-execution flaws, after a two-month coordinated remediation effort.** By [Ryan Merket](https://runtimewire.com/author/ryan-merket) · Published Primary source: [X · @OpenAI](https://x.com/openai/status/2112907856018309586?s=46) ## Why it matters The flaws affect a widely deployed runtime, and the disclosure shows that AI-assisted discovery must be followed by validated findings, coordinated fixes and operator updates to reduce risk. OpenAI says its models helped researchers find two critical remote-code-execution flaws in PHP, vulnerabilities PHP maintainers patched on October 21st after a two-month coordinated effort with researchers, maintainers and security providers. The fixes address flaws that could let an unauthenticated attacker run code with the privileges of a PHP web worker.… When you purchase through links in our articles, [we may earn a small commission](https://runtimewire.com/affiliate-monetization-standards). This doesn’t affect our editorial independence.