GPT-5.6 Sol Exposes Critical PHP Memory Flaws Affecting Global Web Infrastructure

The dominance of PHP in global web infrastructure means that vulnerabilities in its core engine can have immediate, widespread consequences. On October 21, OpenAI announced that researchers under its "Patch the Planet" cybersecurity initiative used its GPT-5.6 Sol model to identify critical security flaws in the programming language, which is estimated to run approximately 70% of the internet.

The technical specifics of the issue involve two distinct memory management errors, designated as CVE-2026-109618 and CVE-2026-109619, both of which received a critical severity score of 9.2 out of 10. The first flaw occurs when PHP exhausts its allocated memory during a request, potentially leaving incomplete internal data that the engine later treats as valid. The second involves a fatal error that leaves the system pointing to already freed memory, allowing subsequent requests to access or corrupt that space. Because these issues reside in the PHP core engine, websites are vulnerable even if their specific application code is secure.

The discovery was the result of a coordinated effort involving Calif, a California-based cybersecurity firm and founding partner of the initiative, and OpenAI researchers. The audit began on July 30, 2026, at the request of the PHP Foundation, which had been aware of the underlying flaw since 2024 but had been unable to find a method for exploitation or a fix. On August 11, Calif researcher Ryan A. identified the exploitable vulnerability, with OpenAI researchers confirming the finding the same day. The cybersecurity firm Wiz also independently identified an additional related vulnerability during this period.

OpenAI states that human developers and security teams had previously examined the code but could not fully resolve the issues, allowing them to persist for two years. In contrast, researchers using AI demonstrated practical exploitation methods within just two weeks. The AI-assisted team also showed that the flaws could expose sensitive data stored in server memory, including passwords, authentication tokens, and API keys. Under specific conditions, attackers could exploit these weaknesses remotely without login credentials to execute malicious code and potentially take control of affected servers.

The PHP Foundation released patched versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12 to address the vulnerabilities, noting that versions 8.1 and older will not receive official fixes. Although the coordinated release was originally scheduled for October 22, it was moved up to October 21 following premature disclosures on October 20 that triggered public concern. OpenAI attributed the two-month timeline for the fix to the complexity of the task, which required major changes to the PHP engine.

The incident highlights what OpenAI terms the "Defender's Window," a concept introduced after its models hacked Hugging Face. This framework describes a narrow timeframe where organizations can use frontier AI to strengthen defenses before those capabilities become widely available to malicious actors. OpenAI argues that while the flaws might have remained harmless without AI-driven exploitation, it is a collective responsibility to proactively address such risks. This view aligns with recent findings by Anthropic, whose Claude Mythos model identified thousands of zero-day vulnerabilities across major operating systems and web browsers.

For California-based readers and developers, the situation underscores the shifting dynamics of cybersecurity. As AI tools become more capable of identifying complex, deep-seated code flaws, the window for proactive defense is shrinking. The rapid patching of PHP demonstrates the potential for AI to accelerate remediation, but it also raises the bar for how quickly organizations must respond to maintain the integrity of their digital infrastructure.