OpenAI model generates 948 Linux root exploits in automated run
OpenAI model, Linux kernel
OpenAI disclosed that its upcoming AI model automatically created working exploits for 948 Linux kernel bugs and produced patches for each. The research shows AI can be used to mass‑generate privilege‑escalation exploits.
why this severityResearch demonstration of AI‑generated Linux kernel exploits
- first report
- 5 Nov 2026
- last update
- 5 Nov 2026
Timeline · 2
Sources · 3
News and write-ups
- 2026-11-05OpenAI’s upcoming AI model built 948 working Linux root exploits in a single runHelp Net Security · helpnetsecurity.com/2026/11/05/openai-linux-kernel-root-exploits
- 2026-11-05OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour RunThe Hacker News · thehackernews.com/2026/11/openai-ai-pipeline-generates-948-linux.html
- 2026-11-05AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI ResearchSecurityWeek · securityweek.com/ai-agents-got-root-on-linux-via-948-kernel-flaws-in-openai-rese
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- AI-enabled attack
- categories
- AI-generated malwareAI-assisted intrusion
- severity
- 1 · Research / proof of concept
- targets
- Not applicable
- owasp llm top 10
- no entry for these categories
- dates
- happened Oct 2026 (approx.) · first reported 5 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.95 · created 2026-11-05 11:07Z · updated 2026-11-06 08:21Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# OpenAI model generates 948 Linux root exploits in automated run https://gcdradar.vercel.app/incidents/openai-model-generates-948-linux-root-exploits-in-automated · AIR-2026-1781 · live - Lane: Research - Severity: 1 (Research / proof of concept): Research demonstration of AI‑generated Linux kernel exploits - Fix status: Fix status unknown - First reported: 2026-11-05 (happened 2026-10) - AI role: AI-enabled attack - Products: OpenAI model, Linux kernel ## Summary OpenAI disclosed that its upcoming AI model automatically created working exploits for 948 Linux kernel bugs and produced patches for each. The research shows AI can be used to mass‑generate privilege‑escalation exploits. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-11-05: OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run (https://thehackernews.com/2026/11/openai-ai-pipeline-generates-948-linux.html) - 2026-11-05: OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run (https://helpnetsecurity.com/2026/11/05/openai-linux-kernel-root-exploits) ## Sources - 2026-11-05 Help Net Security: OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run https://helpnetsecurity.com/2026/11/05/openai-linux-kernel-root-exploits - 2026-11-05 The Hacker News: OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run https://thehackernews.com/2026/11/openai-ai-pipeline-generates-948-linux.html - 2026-11-05 SecurityWeek: AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research https://securityweek.com/ai-agents-got-root-on-linux-via-948-kernel-flaws-in-openai-research Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedCyberDual CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance
Research · since 27 Oct 2026
AI - closedClaude Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns
Breaches & attacks · Exploited · since 27 Aug 2025
AI - closedLAMEHUG LAMEHUG Malware Integrates LLM for Real-Time Command Generation
Breaches & attacks · Exploited · since 10 Jul 2025
AI - closedClaude Anthropic Report Reveals Claude Misuse in Cyberattacks and Fraud
Breaches & attacks · Exploited · since 23 Apr 2025
AI - closedXanthorox AI Darknet Forum Introduces Xanthorox AI Autonomous Cyberattack Platform
Research · since 7 Apr 2025
AI - closedMiniapps chatbots FunkSec ransomware group allegedly leverages AI tools in attacks
Breaches & attacks · Real loss · since 10 Jan 2025
AI