OpenAI has announced an autonomous pipeline that can discover vulnerabilities, verify exploits, and propose patches. In a single run, its upcoming cybersecurity model verified 948 Linux local privilege escalation vulnerabilities and generated patch proposals. The API run cost approximately $1.2 million.
Local privilege escalation occurs when an attacker with standard user access gains administrator privileges. OpenAI also reported dynamically reproducing 1,724 vulnerabilities and creating 291 proofs of concept for information leaks.
OpenAI estimates the cost at about $1,279 per verified privilege escalation vulnerability. The company says that, using historical Pwn2Own and TyphoonPWN bounty figures, the findings could correspond to $18.9 million to $66.3 million in bounty value.
The run also uncovered at least 10 Linux exploitation techniques that the company’s consulted experts judged to be previously unknown. OpenAI’s post does not list CVE numbers or say whether the proposed patches have been incorporated upstream.
OpenAI warns that Linux systems with low-privilege accounts and outdated software can be vulnerable to attackers seeking root access. Users should install security updates provided by their Linux distributor. The company also points to isolation tools such as Firecracker and gVisor.
Although exploit verification is automated, human researchers review results before they are reported to maintainers. OpenAI says it is working with Linux maintainers and Patch the Planet partners. The pipeline targets a Linux desktop configuration with standard protections enabled; the company has not provided instructions for general users to run it themselves.
Sources: OpenAI’s announcement · OpenAI’s post
ChicagoVPS is your gateway to unparalleled hosting solutions. Our state-of-the-art datacenters and powerful network ensures lightning-fast speeds and uninterrupted connectivity for your websites and applications. Whether you’re a startup looking for scalable resources or an enterprise in need of enterprise-grade hosting, our range of plans and customizable solutions guarantee a perfect fit. Trust in ChicagoVPS to deliver excellence, combining unmatched reliability and top-tier support.
For Inquiries or to receive a personalized quote, please reach out to us through our contact form here or email us at sales@chicagovps.net.
