{"slug": "openai-spent-1-2m-in-api-cost-to-fix-948-linux-vulnerabilities", "title": "OpenAI spent $1.2M in API cost to fix 948 Linux vulnerabilities", "summary": "OpenAI security researchers built an autonomous cyber vulnerability discovery, exploitation and patching pipeline that, in a single run using an upcoming cyber model, validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1,213,430 — about $1,279 per vulnerability. The run reproduced 1,724 vulnerabilities and produced proofs of concept for 291 information leaks plus working exploits for 948 distinct local privilege escalation flaws that succeeded on a stock Linux desktop configuration with standard security protections, and the agents discovered and used at least 10 Linux exploitation techniques OpenAI says experts consulted consider novel. OpenAI said it is working with Linux maintainers and Patch the Planet partners on reports and patches, and estimated that applying historical Pwn2Own and TyphoonPWN bounty rates would give the findings a hypothetical value of $18.9M–$66.3M.", "body_md": "OpenAI on X: \"Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.\nIn a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost… / X\n\nOpenAI on X: \"Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.\nIn a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.\"\n\nOur security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.\nIn a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.\n\nOur security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.\nIn a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.\n\nThe pipeline finds security-relevant code, scans for vulnerabilities, reproduces them in isolated environments, tests whether they can be exploited, and generates candidate patches.\nHuman researchers review the results before reporting vulnerabilities and propose fixes toShow more\n\nThe run reproduced 1,724 vulnerabilities. It produced proofs of concept for 291 information leaks and working exploits for 948 distinct local privilege escalation vulnerabilities.\nThose exploits worked on a stock Linux desktop configuration with standard security protectionsShow more\n\nThe full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.\nFor context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.\nThis demonstrates the relative efficacy of using AIShow more\n\nThe agents also discovered and used at least 10 Linux exploitation techniques that, to the best of our knowledge and all of the experts that we consulted, are novel.\nThis suggests frontier LLMs can discover and patch new approaches to exploitation, beyond simply applying knownShow more\n\nOur goal is to help defenders find and fix vulnerabilities before attackers can use them. We’re working with Linux maintainers and Patch the Planet partners on reports and patches.", "url": "https://wpnews.pro/news/openai-spent-1-2m-in-api-cost-to-fix-948-linux-vulnerabilities", "canonical_source": "https://twitter.com/OpenAI/status/2118119451401048497", "published_at": "2026-11-05 03:30:05+00:00", "updated_at": "2026-11-05 03:50:29.266904+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-agents", "ai-safety", "large-language-models", "ai-research"], "entities": ["OpenAI", "Linux", "Linux kernel", "Patch the Planet", "Pwn2Own", "TyphoonPWN"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/openai-spent-1-2m-in-api-cost-to-fix-948-linux-vulnerabilities", "markdown": "https://wpnews.pro/news/openai-spent-1-2m-in-api-cost-to-fix-948-linux-vulnerabilities.md", "text": "https://wpnews.pro/news/openai-spent-1-2m-in-api-cost-to-fix-948-linux-vulnerabilities.txt", "jsonld": "https://wpnews.pro/news/openai-spent-1-2m-in-api-cost-to-fix-948-linux-vulnerabilities.jsonld"}}