OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
Summary: OpenAI detailed a five-stage agentic pipeline that, in a mid-October 2026 run using an upcoming cyber-focused model, analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 working local privilege escalation exploits within 30 hours at $1,213,430 in API credits, or $1,279 per exploit. OpenAI said the agents discovered and used at least 10 novel Linux exploitation techniques, building on 24 LPE exploits its GPT-5.5-Cyber model found in June 2026.
What you should know: OpenAI's own conclusion is that a low-privileged account on an unpatched system should be treated as functionally equivalent to root access for a well-resourced threat actor - and with Google Threat Intelligence Group reporting monthly vulnerability disclosures more than doubling from 5,045 in January 2026 to 10,740 in August 2026, your patching cadence is now the variable that decides whether that holds.
Read the original at The Hacker News ↗
- Topics
- AI Security
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026