OpenAI’s GPT-5.6 Sol Exposes Critical PHP Flaws Affecting 70% of the Web

A critical vulnerability in the software powering three-quarters of the internet has been weaponized by artificial intelligence, marking a significant shift in how digital infrastructure is defended. The discovery underscores the urgency of the "Defender's Window," a period where advanced AI models can be used to secure systems before malicious actors do the same.

The timeline of this incident reveals a gap in traditional security processes. The PHP Foundation first identified the underlying flaw in 2024, but human developers were unable to determine a method for exploitation or a viable fix for two years. On July 30, 2026, researchers from Calif, a founding partner in OpenAI’s Patch the Planet initiative, began auditing the code at the Foundation’s request. By August 11, both Calif researcher Ryan A. and OpenAI’s own team identified the exploitable vulnerability. Shortly after, the security firm Wiz independently discovered a second related flaw.

The two issues, designated CVE-2026-109618 and CVE-2026-109619, stem from how PHP handles memory management and error processing. The first occurs when the engine exhausts allocated memory, potentially leaving incomplete data that is later treated as valid. The second involves a fatal error causing the engine to point to freed memory, which subsequent requests can then access or corrupt. Because these flaws reside in the core engine, they affect websites even if their specific application code is secure. Both vulnerabilities carry a critical severity score of 9.2 out of 10.

The most alarming aspect of the discovery is the speed with which AI researchers transformed a theoretical bug into practical exploits. While human teams had studied the code for two years without success, AI-assisted researchers demonstrated working exploits within two weeks. These exploits allow remote attackers to execute malicious code without login credentials, potentially taking control of servers and exposing sensitive data such as passwords, authentication tokens, and API keys stored in memory.

In response, a coalition of PHP maintainers, security providers, and government agencies coordinated a fix over a two-month period. The complexity of the required changes to the PHP engine necessitated this timeline. Patched versions, including PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12, were released to address the issues. PHP versions 8.1 and older will not receive official fixes. The coordinated release was originally scheduled for October 22 but was moved up to October 21 after premature disclosures on October 20 sparked public concern.

OpenAI argues that this incident validates the Defender's Window concept, which posits that organizations must use frontier AI to patch defenses before those same capabilities become widely available to attackers. The company suggests that while one could argue the flaws were harmless without AI to exploit them, the proactive approach is necessary because powerful technology will inevitably be used by bad actors. This perspective is supported by recent findings from Anthropic’s Claude Mythos, which identified thousands of zero-day vulnerabilities in major operating systems and web browsers.

Moving forward, every site using PHP can safely upgrade to the new versions to remain secure. The incident serves as a case study in the evolving cybersecurity landscape, where the speed of AI-driven discovery and exploitation forces a rapid response from global maintainers. As AI models continue to improve, the window for defense may narrow, making proactive, AI-assisted auditing a critical component of web infrastructure maintenance.