AI models from OpenAI and Google found critical PHP flaw

OpenAI's GPT-5.6 Sol found a critical PHP vulnerability through the Patch the Planet initiative, and security firm Wiz independently found the same flaw using Google's Gemini 4 Argon. It could affect millions of websites. OpenAI warns the same capabilities can help attackers.

Why it matters: Two independent models converging on the same bug in widely deployed code shows AI vulnerability discovery now works at real-world scale. That shortens the window between discovery and exploitation, so patch speed matters more, and it strengthens the dual-use argument in the safety policy debate.