# SZB-c7e59b0d46: OpenAI reports 948 Linux kernel privilege escalation flaws found by AI pipeline

OpenAI said a pipeline using an upcoming cyber-focused AI model validated and patched 948 local privilege escalation vulnerabilities in the Linux kernel, out of 1,724 reproduced findings.

- Type: Early warning
- Kind: Vulnerability
- Vendor: OpenAI
- Product: Linux kernel
- Status: Reported, not confirmed
- Sources: 5 distinct
- First seen: 2026-11-05 05:06 UTC

> No statement or filing from OpenAI has reached cve.now yet. Every claim below is quoted from, and linked to, the source that made it.

Written by a model from the sources below. Verify against them.

## Summary

OpenAI said a pipeline using an upcoming cyber-focused AI model validated and patched 948 local privilege escalation vulnerabilities in the Linux kernel, out of 1,724 reproduced findings. OpenAI detailed the work on Wednesday and said it cost $1.2 million in API usage over a 30-hour run.

## What to do

- Apply Linux kernel updates from your distribution as soon as they are released
- Prioritize patching hosts that allow untrusted local users to log in
- Track your distribution's security advisories for the fixed kernel versions
- Confirm ChatGPT web and app clients are updated to the latest version
- Avoid entering highly sensitive data into ChatGPT until the fix is confirmed
- Review connected apps and shared chat links for unfamiliar access

## Timeline

- 2026-11-05 04:31 UTC: Made public by The Hacker News
- 2026-11-05 05:06 UTC: First seen by cve.now

## Evidence (5 sources)

- 2026-11-05 · Press · [The Hacker News](https://thehackernews.com/2026/11/openai-ai-pipeline-generates-948-linux.html): “OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs.”
- 2026-11-05 · Press · [The Hacker News](https://thehackernews.com/2026/11/researchers-bypass-chatgpt-lockdown.html): “Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT.”
- 2026-11-05 · Social · [r/cybersecurity](https://www.reddit.com/r/cybersecurity/comments/1xoo84b/researchers_bypass_chatgpt_lockdown_mode_to/): “Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction”
- 2026-11-05 · Social · [Mastodon](https://mastodon.social/@EUVD_Bot/117565859308817914): “Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer.”
- 2026-11-05 · Social · [Mastodon](https://mastodon.social/@Analyst207/117566058292350202): “A newly discovered security flaw in ChatGPT's Lockdown Mode could allow hackers to steal sensitive chat data, launch phishing attacks, and deliver malware - including through zero-click data exfiltration in the desktop app.”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-c7e59b0d46&body=https%3A%2F%2Fcve.now%2FSZB-c7e59b0d46%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about SZB-c7e59b0d46

### Has OpenAI confirmed it?

The Hacker News, The Hacker News and r/cybersecurity report it. No statement from OpenAI has reached cve.now yet.

Source: https://thehackernews.com/2026/11/openai-ai-pipeline-generates-948-linux.html, https://thehackernews.com/2026/11/researchers-bypass-chatgpt-lockdown.html, https://www.reddit.com/r/cybersecurity/comments/1xoo84b/researchers_bypass_chatgpt_lockdown_mode_to/, https://mastodon.social/@EUVD_Bot/117565859308817914, https://mastodon.social/@Analyst207/117566058292350202

### What should OpenAI users do?

Apply Linux kernel updates from your distribution as soon as they are released. Prioritize patching hosts that allow untrusted local users to log in. Track your distribution's security advisories for the fixed kernel versions. Confirm ChatGPT web and app clients are updated to the latest version. Avoid entering highly sensitive data into ChatGPT until the fix is confirmed. Review connected apps and shared chat links for unfamiliar access.

## Related

- Browse: [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/SZB-c7e59b0d46
Site guide for agents: https://cve.now/llms.txt