OpenAI patches nearly 1,000 Linux vulnerabilities with new AI model
In a research project, OpenAI has used a cybersecurity model to detect and automatically patch 948 vulnerabilities in the Linux kernel at a cost of $1.2 million.

What happened?
OpenAI has unveiled a prototype for an autonomous security workflow that detects, validates, and fixes vulnerabilities. In a test run, the system identified and created security patches for 948 local privilege escalation vulnerabilities in the Linux kernel. The entire operation was carried out at an estimated API cost of $1.2 million.
Key facts
| Antal patchade sårbarheter | 948 stycken |
|---|---|
| Reproducerade sårbarheter | 1 724 stycken |
| Identifierade kandidatfynd | 2 308 stycken |
| Beräknad API-kostnad | 1,2 miljoner USD |
| Publiceringsdatum | 4 november 2026 |
”In one run with our cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in Linux at an API cost of $1.2 million.”
”Security research that once required a separate, sustained investigation for each finding can increasingly be run as a systematic process.”
Why it matters
Security analysis has traditionally required extensive manual review to reproduce bugs and create functional security fixes. By automating both exploitation and patching, OpenAI demonstrates that vulnerability validation and remediation can be operated as a large-scale, systematic process.
Who is affected?
The report is aimed at security researchers, operating system developers, and IT managers responsible for vulnerability management in Linux environments. The findings are relevant to organisations evaluating automated code review.
Impact on the EU
The report focuses on technical research regarding the Linux kernel and is not directly affected by EU-specific legislative requirements or restrictions. The results are available globally to security researchers.
What else you should know
The prototype identified a total of 2,308 potential vulnerability candidates in the Linux kernel. Of these, the system successfully reproduced 1,724 cases dynamically before generating 948 complete attack-and-patch chains.
Quick answers about this story
Vad har hänt?
När hände det?
Varför spelar det roll?
Vad kostade körningen?
The link opens in a new window and leads to the publisher's own site.
Källan har spårats automatiskt från utgivaren via Aheadlines signalkedja.
AI-verktyg i artikeln
Topics
Get similar news straight to your inbox
The reader's room
Send in a question or an addition. The newsroom reads everything before it's published and replies when relevant. No AI-generated text – just people.
Sign in to submit a comment or question.
Read the article through your role
- Decide whether this affects strategy over 6–12 months or is just noise.
- Discuss with leadership: do we own the right question or does ownership need to move?
- Ask: what risk are we taking by NOT acting on this this quarter?
Generated angle — not editorial analysis of "OpenAI patches nearly 1,000 Linux vulnerabilities with new A"