Max Justicz, chief technology officer and cofounder of startup Charge Robotics, used OpenAI’s GPT-5.6 Sol model to uncover a severe vulnerability in APT, the package manager used by Debian and Ubuntu. Tracked as CVE-2026-109518, the flaw could allow an attacker to insert tampered code between a server and its software source and then execute it with root privileges. He reported the issue to the Debian Project in late September 2026, and Debian released a fix by early November 2026, with no known evidence that it was exploited before being patched. Meanwhile, an automated research effort using OpenAI’s cyber models identified 948 unique vulnerabilities in the Linux kernel at a reported cost of approximately $1.21 million in API credits.
Source: Read the original article
