OpenSight News: Open Source

OpenAI says its AI agents built working root exploits for 948 Linux kernel bugs

Ari — Fri, 06 Nov 2026 00:00:00 GMT

OpenAI says an unreleased AI model for cyber security built working root exploits for 948 different Linux kernel bugs. It did so in a single automated run in October that cost a little over one million dollars in compute. That is roughly 1,300 dollars per exploit. The company says the agents also found at least ten new attack techniques.

The pipeline first flagged about 2,300 possible bugs and confirmed about 1,700 of them. Security staff review every exploit and proposed patch before it goes to the kernel maintainers. OpenAI says hundreds of reports and fixes have gone out so far, starting with the most serious, and partners in its Patch the Planet programme are sending the rest. Its warning for operators is blunt. On an unpatched Linux system, any low-privilege access should be treated as close to full control for a capable attacker. The work shows how cheap exploit finding has become, for defenders and attackers alike.

Sources

A thousand fewer paths to root — OpenAI, 5 Nov 2026 (primary source)
OpenAI's upcoming AI model built 948 working Linux root exploits in a single run — Help Net Security, 5 Nov 2026
AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research — SecurityWeek, 5 Nov 2026

US cyber agency confirms attacks on PHP2Shell flaws and sets a patch deadline

Ari — Mon, 02 Nov 2026 00:00:00 GMT

The two critical PHP flaws fixed on 21 October are now used in real attacks. The US Cybersecurity and Infrastructure Security Agency, CISA, added both to its catalogue of known exploited vulnerabilities on 26 October. Federal agencies had until 30 October to patch. The flaws let an attacker run code on a web server without logging in.

Researchers say attempts started about four days before the patches were out. Working remote shells were later seen on test servers set up to catch attackers. The fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Any server still on an older build of those lines should be treated as exposed. PHP 8.1 and older get no official fix.

Sources

CISA confirms PHP2Shell vulnerabilities now exploited in attacks — BleepingComputer, 27 Oct 2026 (primary source)
CISA confirms attackers are exploiting both PHP2Shell flaws — The Next Web, 27 Oct 2026

Mistral publishes the weights of its trillion-parameter Large 4 model

Ari — Sun, 01 Nov 2026 00:00:00 GMT

Mistral, the French AI company, has released the full weights of Mistral Large 4. The model has about one trillion parameters. Anyone can now download it and run it on their own hardware. Mistral says it is the strongest open model for coding and for security work such as finding and fixing vulnerabilities.

The weights are on Hugging Face under a modified MIT licence. Use, fine-tuning and commercial use are allowed. Companies that want to sell the model as a hosted cloud service need a separate licence. The release follows a preview earlier in October, and Mistral says three more weeks of training lifted its terminal benchmark score from 28 to 41 percent. The benchmark claims are the vendor's own. For teams that need to keep data in house, it widens the choice of large models they can host themselves.

Sources

Mistral Large 4 (Le Chonk) is now open weight — Mistral AI, 29 Oct 2026 (primary source)
Mistral releases weights for its trillion-parameter AI model, targeting cybersecurity — TechCrunch, 29 Oct 2026

A critical GitLab flaw patched in October is now being exploited in the wild

Ari — Sat, 31 Oct 2026 04:00:00 GMT

Attackers are exploiting a critical flaw in GitLab, the code hosting and CI platform. The US Cybersecurity and Infrastructure Security Agency, CISA, added it to its list of actively exploited vulnerabilities on 29 October. The flaw has the highest severity score of ten. An attacker without an account can run code on the server with a crafted regular expression in a pipeline configuration.

It affects GitLab Community and Enterprise Edition from version 19.2 up to the fixed releases 19.2.8, 19.3.4 and 19.4.2, which GitLab published on 12 October. US federal agencies must patch by 1 November and check for signs of compromise. Anyone running a self-managed GitLab server on those versions should update now and review pipeline configurations and logs for anything unexpected. GitLab.com is run by GitLab itself.

Sources

CISA Adds Two Known Exploited Vulnerabilities to Catalog — CISA, 29 Oct 2026 (primary source)
GitLab Critical Patch Release: 19.4.2, 19.3.4, 19.2.8 — GitLab, 12 Oct 2026

PHP patches two critical remote code execution flaws in all supported lines

Ari — Thu, 29 Oct 2026 12:15:00 GMT

The PHP project has released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical vulnerabilities, rated 9.2 under CVSS 4.0 in the advance notice. CVE-2026-109618 lets an out-of-memory condition leave request data half initialised, which cleanup code may then trust. CVE-2026-109619 lets internal state from one request outlive its memory and be reused by a later request on the same worker. Both can lead to remote code execution without authentication, and every setup that serves web requests is affected, with mod_php named as the highest risk.

The project says updating is the only complete fix; configuration changes such as disabling session upload progress only narrow the exposure. PHP 8.1 and older get no official release, although source backports exist. PHP 8.2 reaches end of life on 31 December 2026.

Sources

RCE via OOM corruption (CVE-2026-109618) — PHP project, 21 Oct 2026 (primary source)
RCE via stale global state (CVE-2026-109619) — PHP project, 21 Oct 2026
PHP news archive 2026, security advisory of 21 October — PHP project, 21 Oct 2026

Kubernetes starts a working group to define workload conformance

Ari — Thu, 29 Oct 2026 12:15:00 GMT

The Kubernetes community has formed a Workload Conformance Working Group. Certified Kubernetes already tests clusters, and the AI Conformance programme tests whether a cluster can run AI workloads, but nothing comparable exists for the applications themselves. Operators still check each workload by hand before a node drain or an upgrade.

The charter names three deliverables: a specification of workload behaviour per Kubernetes minor version, a method to test each requirement against a running workload, and upstream tooling that runs those tests. The scope spans security, resilience to disruption, resource use, networking, storage, API usage and observability. Every requirement must have an objective, automated test. SIG Architecture will own the specification and SIG Apps brings the application view. The group aims for a stable first specification within two to three release cycles.

Sources

Announcing the Workload Conformance Working Group — Kubernetes project, 27 Oct 2026 (primary source)