OpenAI Pipeline Finds 948 Linux Root Paths
OpenAI says its upcoming cyber model autonomously identified, validated, exploited, and generated patches for 948 Linux local privilege-escalation vulnerabilities in a mid-October run costing $1.2 million in API credits. Human researchers reviewed the outputs before reporting vulnerabilities and patches to maintainers.
This is a major shift from AI-assisted security review toward industrial-scale vulnerability research, but the cost and need for expert validation show that autonomy is not yet turnkey.
- –The pipeline narrowed 2,308 candidate findings to 1,724 reproduced vulnerabilities and 948 working LPE exploits.
- –It reportedly discovered at least 10 novel Linux exploitation techniques, raising the stakes for both defenders and attackers.
- –The run averaged roughly $1,279 per LPE exploit, potentially cheaper than historical bug-bounty valuations.
- –Candidate patches still required iteration to address code quality, performance, conventions, and related vulnerability variants.
- –The result strengthens the case for continuous AI-assisted scanning, isolation, independent verification, and rapid patch review.
DISCOVERED
53m ago
2026-11-04
PUBLISHED
1h ago
2026-11-04
RELEVANCE
AUTHOR
OpenAI