OpenAI launches Patch the Planet to hunt bugs in open source

OpenAI's Daybreak initiative, Patch the Planet, pairs frontier AI with security experts to find and fix vulnerabilities in open source software. Every finding is human-reviewed, and maintainers keep control of their code and releases. Projects also get lasting defenses like better tests, fuzzing tools, and security workflows. The program's first disclosure covers two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, that let unauthenticated attackers run code on affected servers.