OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon found critical PHP flaw affecting millions of websites

OpenAI's GPT-5.6 Sol identified a critical vulnerability in PHP as part of the Patch the Planet initiative, a program aimed at using AI to find and fix software flaws. The same vulnerability was independently discovered by security firm Wiz using Google's Gemini 4 Argon, demonstrating that multiple frontier models can converge on the same security finding.

The discovery is significant because PHP powers a large share of the web, meaning the flaw could affect millions of websites if left unpatched. The fact that two different AI systems from competing labs found the same issue independently suggests that advanced language models are becoming increasingly capable of automated vulnerability research.

OpenAI has also raised concerns that the same AI capabilities enabling these discoveries could be misused by malicious actors to find and exploit vulnerabilities at scale. This dual-use nature underscores a broader tension in the AI security landscape: models powerful enough to defend systems are also powerful enough to attack them.

The Patch the Planet initiative represents a notable shift in how AI labs engage with software security, moving from general-purpose assistance toward targeted, high-impact applications. If successful, such programs could accelerate the patching cycle for critical infrastructure, though they also raise questions about the pace at which defenders can keep up with AI-assisted attackers.

This page provides an editorial summary based on publicly available information. It is not a republished article. Use the source link below for the original report.