// AI threat desk · 22 Oct 2026
Home/CVE · Vulns & Patches
Vulns & PatchesCriticalAISECCVSS 10.0 / 9.2

OpenAI launches Patch the Planet to address critical open-source flaws

OpenAI published details of Patch the Planet, a program connecting security researchers, maintainers and incident responders to address critical open-source vulnerabilities, on Oct 21, 2026.

· 1 min read
AI-generated image of security researchers coordinating around laptops in an operations centre.
AI-generated image, not a photo of the event.
Key takeaways
  • Patch the Planet connects security researchers, maintainers and incident responders to address critical open-source vulnerabilities.

OpenAI published details of Patch the Planet on Oct 21, 2026, describing a program that connects security researchers, maintainers and incident responders to address critical vulnerabilities across open source.

On this page

Trail of Bits, HackerOne and Calif joined the launch

Blockchain News reported that Trail of Bits said the program supplies maintainers with expert validation, patches and workflow improvements. HackerOne said its H1 Platform provides shared intake, triage, remediation tracking and coordinated disclosure.

HackerOne also said OpenAI funds the program while participating maintainers retain control of their projects.

Dashboard showed 466 patches accepted upstream on Oct 21

Blockchain News reported that Patch the Planet’s dashboard showed 68 codebases under review, 1,995 issues found, 679 patches written and 466 patches accepted upstream on Oct 21, 2026.

The figures were program-reported and were not described as independently audited metrics.

MeasureCount
Codebases under review68
Issues found1,995
Patches written679
Patches accepted upstream466

FAQ

What is OpenAI Patch the Planet?

It is an initiative that connects security researchers, maintainers and incident responders to address critical vulnerabilities across open source.

How many patches has Patch the Planet accepted upstream?

Blockchain News reported that the dashboard showed 466 patches accepted upstream on Oct 21, 2026. The figures were program-reported and were not described as independently audited metrics.

Sources

  1. Patch the Planet: global response coordination as agents uncover critical vulnerabilities, OpenAIPrimary
  2. Was OpenAI's 'Patch the Planet' a Success? The Difficulty of Information Management Exposed by a Critical PHP Vulnerability, note
  3. OpenAI Wants to ‘Patch the Planet’ (With Its Own AI), Gizmodo
  4. Patch the Planet expands coordinated disclosure for critical open source bugs, Blockchain News
How we checked this story
ClaimSourceStatus
OpenAI said Patch the Planet connects security researchers, maintainers and incident responders to help address critical vulnerabilities across open source.OpenAIConfirmed
Blockchain News described Patch the Planet as a coordinated response linking researchers, maintainers and incident responders to move findings toward validation and remediation.Blockchain NewsAttributed
Blockchain News reported that the program’s dashboard showed 68 codebases under review, 1,995 issues found, 679 patches written and 466 patches accepted upstream on 21 October 2026.Blockchain NewsAttributed
Blockchain News reported that the dashboard figures were program-reported and not described as independently audited metrics.Blockchain NewsAttributed
Blockchain News reported that Trail of Bits said the program supplies maintainers with expert validation, patches and workflow improvements.Trail of Bits, via Blockchain NewsAttributed
Blockchain News reported that HackerOne said it provides shared intake, triage, remediation tracking and coordinated disclosure through its H1 Platform.HackerOne, via Blockchain NewsAttributed
Blockchain News reported that HackerOne said OpenAI funds the program and participating maintainers retain control of their projects.HackerOne, via Blockchain NewsAttributed
Gizmodo reported that OpenAI announced a framework for global cooperation shortly after initial reports of emergency patches on Wednesday morning.OpenAI, via GizmodoAttributed
OpenAI published its report on Oct 21, 2026.OpenAIConfirmed

Could not verify

  • Whether the event’s critical vulnerabilities were exploited successfully is not established
  • How many users or systems were affected is not established
  • Whether the reported program metrics were independently verified is not established
openai
See all in Vulns & Patches →
Explore with AI
ChatGPT
Claude
Perplexity
Grok