{"slug": "openai-says-its-agents-exploited-and-patched-948-linux-kernel-flaws-for-1-2m", "title": "OpenAI says its agents exploited and patched 948 Linux kernel flaws for $1.2M", "summary": "OpenAI said on November 4th that its security researchers built an autonomous pipeline that validated and generated patches for 948 distinct local privilege escalation vulnerabilities in the Linux kernel in a single mid-October run, at a total cost of $1,213,430 in API credits, or $1,279 per flaw. The run reproduced 1,724 kernel vulnerabilities and produced 291 information leak proofs of concept alongside the 948 privilege escalation exploits, which OpenAI valued against historical bounty rates of $18.9M to $66.3M for the same set. OpenAI detailed the work in a report titled \"A thousand fewer paths to root,\" noting that the same capability in an attacker's hands would compress the time between a kernel commit and a working root exploit.", "body_md": "# OpenAI says its agents exploited and patched 948 Linux kernel flaws for $1.2M\n\n**The mid-October run reproduced 1,724 kernel vulnerabilities and yielded 291 information leak proofs of concept alongside the 948 privilege escalation exploits.**\n\n        By [Ryan Merket](https://runtimewire.com/author/ryan-merket)\n        · Published \n\nPrimary source: [OpenAI](https://openai.com/index/a-thousand-fewer-paths-to-root/)\n\n## Why it matters\n\nOpenAI has put a price on autonomous exploit development: $1,279 per distinct Linux kernel privilege escalation flaw in its own accounting, against historical bounty rates it values at $18.9M to $66.3M for the same set. If defenders can run this kind of scan before release, the backlog of unexamined kernel code becomes a cost decision rather than a staffing limit. The same capability in an attacker's hands compresses the time between a kernel commit and a working root exploit, making human review and maintainer-controlled patching important safeguards.\n\nOpenAI said on November 4th that its security researchers built an autonomous pipeline that validated and generated patches for 948 distinct local privilege escalation vulnerabilities in the Linux kernel in a single run, at a total cost of $1,213,430 in API credits. [OpenAI (@OpenAI)](https://x.com/OpenAI) announced the result [in a thread on X](https://x.com/OpenAI/status/2118119451401048497), and detailed the work in [its report](https://openai.com/index/a-thousand-fewer-paths-to-root/), titled \"A thousand fewer paths to root.\"…\n\nWhen you purchase through links in our articles, [we may earn a small commission](https://runtimewire.com/affiliate-monetization-standards). This doesn’t affect our editorial independence.", "url": "https://wpnews.pro/news/openai-says-its-agents-exploited-and-patched-948-linux-kernel-flaws-for-1-2m", "canonical_source": "https://runtimewire.com/article/openai-agents-948-linux-kernel-flaws", "published_at": "2026-11-04 23:30:18+00:00", "updated_at": "2026-11-05 02:49:33.910539+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "artificial-intelligence", "ai-research"], "entities": ["OpenAI", "Linux kernel", "Ryan Merket"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/openai-says-its-agents-exploited-and-patched-948-linux-kernel-flaws-for-1-2m", "markdown": "https://wpnews.pro/news/openai-says-its-agents-exploited-and-patched-948-linux-kernel-flaws-for-1-2m.md", "text": "https://wpnews.pro/news/openai-says-its-agents-exploited-and-patched-948-linux-kernel-flaws-for-1-2m.txt", "jsonld": "https://wpnews.pro/news/openai-says-its-agents-exploited-and-patched-948-linux-kernel-flaws-for-1-2m.jsonld"}}