Humanity Unfolds

AI-assisted PHP2Shell discovery leads to coordinated security fixes

Oct 21, 2026

OpenAI reports that Calif used GPT-5.6 Sol to find a critical PHP flaw, while Wiz independently reported both vulnerability classes. PHP maintainers release fixes following a coordinated response.

AI-assisted vulnerability discovery reaches widely used open-source infrastructure. The PHP Foundation traces early signs of one root cause to 2024. AI-assisted reports clarified its impact; maintainers led the fixes. Disclosure is not the discovery date, and available patches are not universal deployment.

Explore on Humanity Unfolds

People

Sources