OpenAI Flags PHP Flaw as One of the Most Severe Security Bugs in Years

The weight of this warning comes less from any technical detail OpenAI disclosed than from who is delivering it: a major AI lab lending its credibility to a PHP vulnerability, a language that underpins a vast share of the web's server-side infrastructure. That framing matters because PHP's exposure is diffuse rather than concentrated, spreading risk across countless operators who may lack the resources to patch quickly. What remains unanswered is the most consequential part — which systems are affected and how many users are exposed, leaving the practical scope of the flaw an open question worth watching.