TL;DR · 30-second read
The Short Version
Much of the internet runs on free software looked after by people short on time. OpenAI, the company behind ChatGPT, is now using artificial intelligence to hunt for security holes in that software, alongside a security firm called Trail of Bits.
Across 19 projects, they found hundreds of problems and have had dozens of fixes accepted so far. Related work turned up one flaw that sat unnoticed for 23 years.
The catch: machines raise many false alarms, so people checked every report first. Finding flaws is getting faster. Confirming and fixing them still takes humans.
OpenAI announced Patch the Planet on June 22, 2026, an initiative under its Daybreak security program that pairs its most cyber-capable AI models with human security engineers to find and fix vulnerabilities in critical open-source software. Trail of Bits has committed its entire security research organization to the initial surge, while HackerOne and Calif are assisting with triage, coordinated disclosure and additional vulnerability discovery.
Initial participants include cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, the Go project, freenginx, Python and python.org. Trail of Bits engineers working with Codex and GPT-5.5-Cyber across 19 open-source projects have identified hundreds of security issues and merged dozens of patches, with many more still in coordinated disclosure, the process of keeping a flaw private until a fix is ready.
Executive Summary
Patch the Planet is built around a problem that AI itself is making worse: maintainers, the people who look after open-source projects, are being asked to process more vulnerability reports, more quickly, with the same limited time and resources. Instead of passing raw AI findings to them, the program has security engineers reproduce and vet each issue, then help develop patches and tests. Maintainers keep control over which patches are deployed and how disclosure is handled.
The announcement matters beyond the open-source community because these projects support widely used networking, cryptography, software supply chain and programming language infrastructure. A fix in one of them can benefit many downstream products and services, including the systems that run in data centers and cloud platforms.
The most useful signal may be the program’s design rather than its headline findings. OpenAI describes its models as highly capable at finding and patching vulnerabilities, but it also says they produce a high volume of false positives and that expert review is essential. That points to a constraint that faster models alone do not remove.
Why Human Review Looks Like the Real Constraint
The early numbers show the shape of the problem: 19 projects, hundreds of issues identified, dozens of patches merged. That gap should not be read as a simple measure of failure or backlog, because issues and patches do not map one to one and many findings remain in coordinated disclosure. It does show that a finding is only the start of the work. As OpenAI puts it, “discovery alone does not protect users.”
The mechanism lies in what happens after a model flags something. False positives, alarms that turn out not to be real problems, can add to the backlog maintainers already face. So Trail of Bits researchers reproduce the evidence, check findings against each project’s documentation and threat model, remove duplicates, reassess severity and prioritize confirmed vulnerabilities. Every issue was manually reviewed before it reached a maintainer. Securing that review layer took a commitment of Trail of Bits’ entire research organization for the initial surge, plus support from HackerOne and Calif.
The final step also depends on people. Maintainers decide what lands and how it is disclosed, which protects their agency but means the pace of fixes is ultimately tied to their capacity and to the review capacity around them. One sprint cannot establish an industry-wide rule, but it supports a practical conclusion: the scarce resource in this model is trusted judgment about what is real, how serious it is and whether a fix is safe to ship.
The Speed Gains Are Real Claims, but Narrowly Scoped
The strongest productivity claims concern tooling. Trail of Bits estimates that a fuzzing lab, a setup that bombards software with unusual inputs to see what breaks, took less than a day to build with repeated Codex runs and GPT-5.5-Cyber, compared with at least several weeks by hand. Differential testing, which runs different implementations of the same protocol against each other to expose disagreements, reached results within days rather than the weeks or months such work has historically taken.
These comparisons measure how quickly test infrastructure was built, not how many users are safer as a result. They are also estimates from a participant in the effort, based on engineers who set the objectives and refined the prompts. Even so, the durable value may be here. Fuzzing harnesses, expanded test suites, threat models and pipelines that mine historical CVEs, the public catalog of known vulnerabilities, can keep working after the first fixes land, which matters for projects that cannot add staff.
Reading the Daybreak Findings Carefully
The wider Daybreak results are striking. In the Linux kernel, GPT-5.5-Cyber analyzed more than 30 million lines of code, flagged hundreds of issues and generated 8 kernel pointer information leak proofs of concept and 24 local privilege escalation exploits, which let an ordinary local user gain higher system privileges. OpenAI also reports a 23-year-old use-after-free memory bug in OpenBSD, 34 confirmed FreeBSD vulnerabilities and more than 10 exploitable Safari flaws found in roughly a week of focused work.
Some claims warrant closer reading. The company says its Firefox vulnerability, patched two days before the Pwn2Own Berlin hacking competition, prompted five of six registered Firefox entries to withdraw; that causal link is an inference that entrants’ own explanations could confirm. Calif’s figure of more than 880,000 websites for its HTTP/2 Bomb denial-of-service technique describes sites running affected software with HTTP/2 enabled, which is a measure of exposure rather than of attacks. And Codex Security identifying patterns corresponding to four of six dnsmasq CVEs is impressive, but its value as a discovery benchmark depends on when that identification occurred relative to the fixes.
What It Means for Operators, Vendors and Maintainers
For infrastructure operators, the practical takeaway is that upstream fixes only help once they are adopted. If AI-assisted research increases the flow of patches to foundational components, then patch intake, testing and deployment downstream become more important. The HTTP/2 Bomb example, which affects NGINX, Apache, IIS and Pingora, shows how one technique can reach across several widely deployed server products.
For the security industry, the program suggests that AI may shift value toward firms that can validate findings and work credibly with maintainers. For maintainers, the support package includes ChatGPT Pro, conditional access to Codex Security and API credits, along with AI-assisted workflows for deduplication, triage and patching. That support is useful, and it also ties project workflows to a commercial vendor’s tools, making the terms and duration of access worth watching.
Background
Open-source software is code published for anyone to use, inspect and modify, and it often sits deep inside commercial products and online services. Its security depends heavily on maintainers, who OpenAI notes are already being asked to handle more vulnerability reports with limited time and resources. Vulnerabilities are commonly tracked through CVE identifiers and handled through coordinated disclosure, which gives projects time to prepare a fix before details become public.
Patch the Planet builds on OpenAI’s broader Daybreak security work, which uses frontier models to help defenders find, validate and remediate vulnerabilities in widely used software. The initiative relies on GPT-5.5-Cyber and Codex Security, working alongside Trail of Bits, HackerOne and Calif. Source: Patch the Planet: a Daybreak initiative to support open source maintainers, OpenAI’s June 22, 2026 announcement of its AI-assisted open-source security initiative with Trail of Bits.Sources