Canonical event

OpenAI publishes controlled autonomous Linux-kernel vulnerability research with 948 working LPE exploits

In its 4 November 2026 publication 'A thousand fewer paths to root,' OpenAI reports a mid-October controlled prototype run scanning Linux kernel targets, producing 2,308 candidate findings, dynamically reproducing 1,724 vulnerabilities and generating 948 working local privilege-escalation (LPE) exploits for a commonly used Linux distribution at USD 1,213,430 in API credits. Human security researchers reviewed outputs and submitted selected evidence and candidate patches through phased reporting. These are publisher-reported research results, not 948 accepted upstream fixes, public independent replication, a real-world campaign or a general assertion that Linux machines were compromised. RTS exact finding link not established in present read-only lookup.

Artifacts

Signals

    View canonical JSON