OpenAI Discloses 948 Linux Local Privilege Escalation Vulnerabilities via Autonomous Pipeline

ChainCatcher report: According to OpenAI’s official website, the company has established an autonomous security research pipeline covering vulnerability discovery, dynamic validation, exploitability assessment, and patch generation. During a run centered on an upcoming network model, the pipeline scanned and validated targets related to the Linux kernel, generating 948 exploits capable of local privilege escalation (LPE) on common Linux distributions, with an API cost of approximately $1.213 million—about $1,279 per LPE exploit. The pipeline identified and analyzed 2,308 candidate findings, dynamically reproduced 1,724 vulnerabilities, and produced 291 information disclosure PoCs. The target virtual machines ran standard desktop systems with full protections enabled. The Scout agent first identified approximately 5,034 audit targets (roughly 2.8 million lines of code, accounting for about 7% of the kernel), and the Analyst agent generated candidate findings within approximately 12 hours. OpenAI stated that it has prioritized reporting critical vulnerabilities for patching in accordance with Linux community guidelines and is continuing to collaborate with Patch the Planet on the remaining reports. OpenAI also reported that, in an adapted kernelCTF environment, it obtained an additional 25 information disclosure PoCs and 21 LPE exploits; among 166 sampled exploits, the agents reportedly employed at least 10 newly identified Linux exploitation techniques. The company emphasized rapid maintainer response: over 100 LPEs have already been patched or entered staging patches within approximately 10 days of scanning, and around 300 are currently under public discussion.