OpenAI outlines coordinated security response after critical PHP flaws

OpenAI outlined a proposed process for coordinating responses to major software vulnerabilities on October 21. The announcement followed a two-month effort through its Patch the Planet initiative to help address critical flaws in PHP, a programming language used by websites and applications.

OpenAI said security firm Calif used GPT-5.6 Sol to identify one critical flaw. Wiz independently discovered and reported both vulnerabilities, the company said. PHP maintainers managed the fixes and release, with partners contributing research, testing and protective measures.

The proposed process covers validating flaws, developing fixes, notifying organizations that need preparation time and coordinating with government agencies. It also extends beyond disclosure to deploying updates and checking that protections work. Maintainers would decide which organizations receive advance information.

OpenAI said it is providing a PHP version checker and plans an accompanying Codex skill to help identify potentially vulnerable installations. The company is seeking security community feedback on its coordination proposal while continuing work on other vulnerabilities it has found..