# OpenAI Ships GPT-6 Cyber at Preparedness Critical for Daybreak Red, Citing 81 Firefox Bugs and the 948 Linux Exploits

Times of AI Desk · 2026-11-05 · Security

[https://timesof.ai/2026/11/openai-autonomous-pipeline-948-linux-root-exploits-1-2m](https://timesof.ai/2026/11/openai-autonomous-pipeline-948-linux-root-exploits-1-2m)

> Updated November 6: OpenAI has named the model behind its November 4 Linux pipeline as GPT-6 Cyber, raised its Preparedness Framework cybersecurity rating to Critical from High, and opened it to select Daybreak Red customers first. OpenAI reports 48.5% on ExploitGym versus 32.1% for GPT-5.6 Cyber, 81 previously unknown high-severity Firefox vulnerabilities, and the same 948 Linux LPE exploits; access expands to all approved Daybreak Red over coming weeks.

**Updated November 6, 2026:** OpenAI has named the model and put it in customers' hands. Earlier reporting below is unchanged.

## November 6: GPT-6 Cyber ships at Critical for Daybreak Red

On **November 5**, OpenAI published **GPT-6 Cyber**, a cybersecurity model trained to find and validate exploitable vulnerabilities inside a researcher-set scope. The post turns the November 4 autonomous Linux pipeline below — then attributed only to an "upcoming, unreleased cyber model" — into a named product with a Preparedness Framework rating of **Critical**, up from **High** for GPT-5.6 Cyber. The Verge reports OpenAI's definition: the model "can identify and develop functional zero-day exploits of all severity levels in many hardened real-world critical systems without human intervention."

OpenAI's own scores: **48.5%** on ExploitGym versus **32.1%** for GPT-5.6 Cyber, and in a honeypot alignment test informed by the Hugging Face incident, it avoided out-of-scope services in **99.93%** of runs without its deployment prompt and **100%** with it. Researchers used it for **81 previously unknown high-severity Firefox vulnerabilities** (Mozilla is releasing fixes) and the **948 Linux local privilege escalation exploits** already reported, with **304 critical findings** disclosed to maintainers with candidate patches. GPT-6 Cyber is available first to **select Daybreak Red** customers via the API and Codex, expanding to all approved Daybreak Red over the coming weeks; **GPT-5.6 Cyber** opens to all Daybreak Red the same day. That continues the [Daybreak Red line that began with GPT-5.6 Cyber](https://timesof.ai/2026/08/openai-daybreak-gpt-5-6-cyber).

### Limits of the November 6 update

- ExploitGym, honeypot and RemoteExploitBench figures are OpenAI's own; no independent board has published matching scores.
- "Critical" is OpenAI's Preparedness Framework label, not an outside certification.
- Access remains gated to approved Daybreak Red customers; OpenAI has not said how large the initial cohort is.
- Reuters coverage of the launch is syndicated via Investing.com; we treat The Verge briefing as the clearer secondary.

Finding a way to root on Linux is turning into a line item. In a research post on **November 4**, OpenAI said an automated pipeline running an **upcoming, unreleased cyber model** produced **948 distinct local privilege escalation (LPE) exploits** against the Linux kernel in a mid-October run, each paired with a candidate patch, for **$1,213,430 in API credits**, or about **$1,279 per exploit**. OpenAI's own conclusion is blunt: for now, a low-privileged account on a system that is behind on patches "should be considered functionally equivalent to root access for a well-resourced threat actor."

## What the pipeline did

The pipeline chose security-relevant parts of the kernel, about 7% of its code, scanned them, reproduced each finding in an isolated virtual machine, tried to build an exploit, wrote a patch, and then handed everything to a human security researcher, OpenAI said. From **2,308 candidate findings** it reproduced **1,724** vulnerabilities and produced proofs of concept for **291 information leaks**. The exploits ran against a stock desktop distribution with standard protections switched on, not a weakened target.

OpenAI says the agents used **10 exploitation techniques** that were new to it and to outside kernel experts it consulted, and it withheld the details "for safety reasons." The same harness running **GPT-5.6 Sol** in late July found **166** LPEs for $513,690; the newer model found more than five times as many novel LPEs despite three months of kernel hardening in between.

OpenAI also tested Google's hardened **kernelCTF** setup, where the pipeline produced **21 LPE exploits** for about $32,936. For comparison, it says 26 confirmed zero-day LPEs had been accepted by kernelCTF in all of 2026.

## Where the fixes stand

Following the kernel community's guidance, OpenAI says it has sent **hundreds of reports and patches** for critical bugs and is working through the rest with partners in **Patch the Planet**, the open-source program it launched [alongside GPT-5.5 Cyber in June](https://timesof.ai/2026/06/openai-daybreak-gpt-5-5-cyber-patch-the-planet). When the 10-day scan ended, 61 of the LPEs had already been patched upstream, 43 had staging patches and 299 were being discussed publicly, OpenAI said, which is why it urges everyone to keep systems updated.

The same day, OpenAI said **GPT-5.6 Cyber** is now available through Daybreak Red in **AWS GovCloud (US-East)** via Amazon Bedrock, for customers approved by both OpenAI and AWS. That extends the [commercial Bedrock launch in August](https://timesof.ai/2026/08/openai-daybreak-aws-bedrock) to U.S. government workloads. The post lands days after [Anthropic described five exploit chains from an unreleased model](https://timesof.ai/2026/11/anthropic-unreleased-model-five-exploit-chains-62-chrome-cves).

## Limits

- Every number here is OpenAI's own. No maintainer, distribution or independent researcher has verified the 948 count, and coverage we found repeats OpenAI's post.
- OpenAI does not name the model, the Linux distribution or the kernel version, and has not said when the model will ship or to whom.
- The $18.9 million to $66.3 million "valuation" OpenAI cites applies past contest bounties to its exploits; it is not money anyone paid.
- OpenAI says an early run counted 20 of 200 "successful" exploits that actually used a different zero-day than the one assigned; it says it fixed that check, but the final figures are not externally audited.

## Sources

- [OpenAI: A thousand fewer paths to root (November 4, 2026)](https://openai.com/index/a-thousand-fewer-paths-to-root/)
- [OpenAI: Daybreak Red is now available in AWS GovCloud (US-East) (November 4, 2026)](https://openai.com/index/daybreak-red-aws-govcloud/)
- [OpenAI: GPT-6 Cyber: Advancing the frontier of aligned cybersecurity agents (November 5, 2026)](https://openai.com/index/introducing-gpt-6-cyber)
- [The Verge: OpenAI says GPT-6 Cyber is better at finding vulnerabilities without going out of bounds (November 5, 2026)](https://www.theverge.com/ai-artificial-intelligence/1027599/openai-gpt-6-cyber-launch)
- [Reuters via Investing.com: OpenAI launches GPT-6 Cyber with Critical cybersecurity rating (November 5, 2026)](https://www.investing.com/news/stock-market-news/openai-launches-gpt6-cyber-with-critical-cybersecurity-rating-5005229)