OpenAI's AI pipeline generated 948 working Linux root-escalation exploits in 30 hours
In an experiment completed in mid-October 2026, OpenAI's research pipeline analyzed the Linux kernel and produced 948 working local privilege escalation (LPE) exploits, code that turns an ordinary low-privilege account into full root access. Of 2,308 candidate vulnerabilities, the system dynamically reproduced 1,724, yielding the 948 working exploits plus proof-of-concept code for 291 further information-leak bugs, completing verification in 30 hours at a total compute cost of roughly $1.2 million. Along the way, the AI agents reportedly discovered about ten exploitation techniques not previously documented by the security community. OpenAI cites Google data showing high-risk vulnerability disclosures rose about 167% during 2026, and argues that patch generation now needs to move at the same pace. For businesses, the takeaway is that a low-privilege account on an unpatched Linux system is no longer a minor risk, since the gap to full root access can now be closed automatically and cheaply.
Sources
This summary was written automatically with AI from the public sources listed above and checked by an independent AI reviewer before publication. For full details, read the original source.