AI Security Audit: GPT-5.6 Sol Exposes Critical Flaws in PHP Core

The PHP Foundation released urgent security updates for its core software on Wednesday, October 21, a day earlier than originally planned. The accelerated timeline was driven by premature public disclosures on Tuesday, October 20, which sparked significant concern within the developer community. These patches address two critical vulnerabilities that had persisted in the language’s engine for over two years, flaws that human developers had struggled to resolve since their initial discovery in 2024.

The revelation comes from OpenAI, which announced in a press release that its GPT-5.6 Sol model, utilized under the “Patch the Planet” cybersecurity initiative, identified the exploitable nature of these defects. The company stated that the AI-assisted researchers transformed a long-standing theoretical bug into working exploits in just two weeks. Given that PHP is estimated to power approximately 70% of the internet, OpenAI characterized this discovery as one of the most significant cybersecurity events of 2026.

The technical details involve deep-seated issues in how PHP handles memory and error processing. The first flaw, tracked as CVE-2026-109618, occurs when the system runs out of allocated memory during a request, potentially leaving behind incomplete data that the engine later misinterprets as valid. The second issue, CVE-2026-109619, arises when a fatal error causes the system to point to memory that has already been freed, allowing subsequent requests to access or corrupt that space. Both vulnerabilities received a critical severity score of 9.2 out of 10.

Because these flaws exist within PHP’s core engine rather than in specific application code, websites can be vulnerable even if their own code is secure. Attackers can exploit these weaknesses remotely without login credentials to execute malicious code or steal sensitive data, such as passwords and API keys, from server memory. The PHP Foundation has issued fixed versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Notably, PHP 8.1 and older versions will not receive official fixes, leaving those installations at risk.

The timeline of the discovery began on July 30, 2026, when researchers from Calif, a founding partner in the Patch the Planet program, started auditing PHP at the Foundation’s request. On August 11, Calif researcher Ryan A. identified the exploitable vulnerability, with OpenAI researchers confirming findings the same day. Later, another cybersecurity firm, Wiz, independently identified an additional flaw. OpenAI noted that while human teams had examined the code for two years without success, the AI tools rapidly demonstrated practical exploitation methods.

OpenAI framed this incident as a practical example of its “Defender’s Window” concept. Introduced after its models hacked Hugging Face, this theory posits a narrow timeframe where organizations can use advanced AI to find and patch defenses before similar capabilities become widely available to malicious actors. The company argues that since powerful technology will inevitably be used by bad actors, it is a collective responsibility to proactively address potential flaws.

The company pointed to recent work by Anthropic’s Claude Mythos, which identified thousands of zero-day vulnerabilities in major operating systems and browsers, to support its argument. While some might argue that flaws requiring AI to exploit are effectively harmless, OpenAI maintains that proactive defense is essential. The company coordinated with PHP maintainers, security providers, and government agencies over two months to develop the fixes, citing the complexity of the required engine changes for the lengthy development period.

For New York and New Jersey businesses and developers relying on web infrastructure, the immediate action is clear: verify the version of PHP running on any servers and upgrade to the latest patched release. With the majority of the web built on this language, the incident underscores the shifting landscape of cybersecurity, where AI tools are no longer just for building applications but are becoming primary drivers of both attack and defense.