OpenAI's automated vulnerability research pipeline flagged 2,308 Linux kernel vulnerability candidates, dynamically reproduced and confirmed 1,724 of them, and generated 948 local privilege escalation exploits that let unprivileged users gain root access. The pipeline spans five stages: vulnerability discovery, dynamic verification, exploitability assessment, patch generation, and human review. The second full scan cost roughly $1.21 million in API credits and yielded 948 independent local privilege escalation vulnerabilities. By bug bounty standards, these exploits are worth an estimated $18.9 million to $66.3 million — 16 to 55 times the pipeline's cost. Third-party kernel vulnerability experts have verified and confirmed that the 10 entirely new exploitation techniques used by the agent are indeed novel. OpenAI is now submitting the relevant vulnerability details and corresponding patches to Linux kernel maintainers.
