OpenAI says its autonomous vulnerability pipeline found and patched 948 Linux kernel LPEs for $1.2M
OpenAI reports its autonomous security pipeline validated 1,724 Linux kernel vulnerabilities and generated 948 local privilege escalation exploits and patches for approximately $1.2 million in API costs.
US-based artificial intelligence company OpenAI published a report on November 4, 2026, stating that it developed an autonomous vulnerability discovery, exploitation, and patching pipeline. Using an upcoming cyber model, the pipeline dynamically reproduced 1,724 vulnerabilities in the Linux kernel and generated 948 local privilege escalation (LPE) exploits and candidate patches. The total API cost for the run was $1.21343 million, averaging approximately $1,279 per LPE exploit.
OpenAI described the pipeline as consisting of five stages: vulnerability discovery, dynamic validation, exploitability assessment, patch generation, and human review. In the discovery stage, agents identified 5,034 high-value audit targets, covering about 7% of the kernel codebase. During the analysis phase, agents produced 2,308 candidate findings within 12 hours. Subsequently, validation agents reproduced 1,724 of these vulnerabilities in isolated environments, achieving a success rate of approximately 74.7%.
To assess economic impact, OpenAI compared the results with historical bug bounty programs. Cybersecurity competitions like Pwn2Own and TyphoonPWN have historically offered $20,000 to $70,000 for Linux kernel LPE exploits. Valuing the 948 exploits at these rates yields a hypothetical total between $18.9 million and $66.3 million, roughly 16 to 55 times the pipeline's cost. Additionally, in tests against Google's kernelCTF program, the pipeline discovered 21 LPE exploits for about $32,936, which would yield around $1.5 million if accepted, approximately 45 times the cost.
OpenAI also noted that the pipeline used at least 10 novel Linux exploitation techniques, which were considered new by third-party kernel exploitation experts. The company emphasized that automated patch generation is essential for securing software as model capabilities improve, urging defenders to proactively analyze their software to make exploitation cost-prohibitive for attackers.