OpenAI Found 948 Linux Security Flaws—And Figured Out How to Exploit Them

Executive Briefing

According to reporting by Decrypt Financial Technology, An automated OpenAI system produced working exploits and draft fixes at roughly $1,279 per flaw, raising new questions about how cheaply AI can find holes in critical software at scale.

Detailed Factual Report

OpenAI says its autonomous security agents discovered 948 distinct vulnerabilities in the Linux kernel, developed working exploits and drafted fixes for review—all for roughly $1.2 million in API credits.

“We chose Linux to study how effectively frontier models could find vulnerabilities and demonstrate their security impact in a codebase of this scale and importance,” OpenAI said in results published Wednesday.

The Linux kernel powers cloud servers, Android devices and much of the world's critical computing infrastructure. The flaws identified in OpenAI's experiment were local privilege-escalation vulnerabilities: An attacker would first need limited access to a vulnerable machine, but could then potentially obtain root privileges and take full control.

OpenAI's agents scanned about 2.8 million lines of kernel code, or roughly 7% of the project. “Our prototype identified and analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 local privilege escalation (LPE) exploits that could allow an unprivileged local user to gain root access” OpenAI said.

Verified Data Points & Key Takeaways

Geographic Scope & Community Impact

Recommended Action & Safety Guidelines

Source & Verification Provenance

Information in this article was compiled directly from records provided by Decrypt Financial Technology. Access the primary source document at: https://decrypt.co/382632/openai-linux-security-flaws-exploit. Reporting and editorial review conducted by the USA NOW News Desk.