OpenAI announced on November 4, 2026 that an autonomous pipeline found and patched 948 local privilege-escalation bugs in the Linux kernel in a single run, using an unreleased cyber-focused model.
Scout agents first narrowed 40 million-plus kernel lines to 2.8 million; the system then ran 2,308 flagged bugs to 1,724 confirmed on test machines to 948 with working exploits and patches. The API cost was $1,213,430, about $1,279 per vulnerability; human reviewers checked results before submission to kernel maintainers.