OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs. "Our prototype identified and analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 local privilege escalation (LPE)
OpenAI unveiled an AI-powered pipeline on Wednesday that generated 948 local privilege escalation (LPE) exploits for Linux in just 30 hours, costing $1.2 million in API fees. The prototype examined 2,308 kernel vulnerabilities, reproduced 1,724, and produced the 948 LPE exploits that could enable an unprivileged user to gain root access.
This follows 24 LPE exploits previously discovered using OpenAI's GPT-5.5-Cyber model in June 2026. The new pipeline comprises five stages and identified at least 10 novel Linux exploitation techniques. The cost per LPE exploit was $1,279, totaling $1,213,430 for the run. OpenAI believes AI-generated patches can be functionally correct and robust against attack variants, but warns the low cost of exploitation may encourage attackers to exploit software vulnerabilities.
Global vulnerability disclosures have surged from 5,045 in January 2026 to 10,740 in August 2026, with high-risk vulnerabilities increasing by 167%. AI-powered tools have accelerated vulnerability discovery but also pose risks if not properly configured. Organizations must adapt their patching and testing processes to keep up with the pace of vulnerability discoveries.
Written by urgent.news from The Hacker News's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
