› In mid-October 2026, an engineer at OpenAI initiated an agent pipeline that began scanning the Linux kernel-the codebase running Android smartphones, public clouds, and supercomputers.
› Ten days later, the run concluded with 948 functional local privilege escalation exploits, each granting root access to an unprivileged user, and an API bill of $1,213,430.
› On November 4, OpenAI documented the findings in its report, "A thousand fewer paths to root," revealing the following day that the underlying engine was GPT-6 Cyber.
› I read the report in its entirety.