PHP 迎来“末日危机”：OpenAI 与 Google 旗下 Wiz 借助 AI 挖出 20 年远古漏洞，引发全网恐慌

美国国家安全局（NSA）周三发布了一条令人担忧的警告，指出 PHP 中发现了两个严重漏洞，PHP 基金会已发布相应补丁。

作为一种被极广泛应用于 Web 应用程序的服务器端编程语言，PHP 支撑着互联网上约 70% 的网站；据部分统计，这一数字超过 3300 万个站点。同时，它也被 WordPress 等热门内容管理系统（CMS）所使用。

NSA 警告称，这些漏洞极其严重，如果网站无法立即安装补丁，就应当直接将其从互联网下线，直到能够修补为止。这些漏洞允许攻击者渗透服务器的文件系统或 Web 应用所使用的数据库。

值得关注的是，自 2004 年发布的 PHP 5 起，这些漏洞就一直潜伏在所有版本的 PHP 中。未运行相对较新版本 PHP 的网站将面临繁重的升级工作，因为 PHP 8.1 及更早版本已不再受官方支持。目前的建议是将 Web 服务器更新至当前的 PHP 版本，即 8.5.12。

那么，这两个潜伏数十年、影响互联网几乎每一个网站的普遍漏洞，究竟是如何突然曝光的？答案自然是 AI，特别是通过 OpenAI 与 Google 旗下的 Wiz。

安全测试公司 Calif 参与了 OpenAI 旨在排查开源软件漏洞的“Patch the Planet”计划。OpenAI 在一篇博文中透露，Calif 使用 GPT‑5.6 Sol 发现了其中一个漏洞。与此同时，Wiz 团队也利用 AI——即其 Wiz Atlas 安全 AI Agent、Gemini 4 Argon 和 GPT-5.6 Sol——在 PHP 中发现了多个漏洞。

OpenAI 和 Wiz 均遵循了负责任的安全研究披露流程，在向公众披露漏洞之前便与 PHP 官方合作开发了补丁。随后，各方共同梳理并完善了发现成果并测试补丁，同时吸引了众多行业力量参与协作。

Wiz 对 Automattic、Akamai、AWS、Cloudflare、Fastly、Imperva、Microsoft 和 Vercel 表示了感谢。（尽管 WordPress 站点广泛使用 PHP，但 WordPress 已发布声明指出，该缺陷并非针对 WordPress 本身，运行该 CMS 的站点必须为其服务器打上补丁，并与网络托管服务商沟通以确保站点受到保护。）

OpenAI 表示，这些漏洞是在黑客察觉之前被研究人员捕获的，因此目前尚未出现野外利用报告。这在一定程度上也是因为在 AI 出现之前，黑客利用这些漏洞的门槛极高。“有了 AI，这不再是障碍。大语言模型（LLM）可以帮助利用代码适配不同的 PHP 版本、配置和内存布局，”Wiz 在其关于该漏洞的博文中如此警告。

换句话说，这类安全问题既是因为 AI 才得以被发现和预防，但同时也正因 AI 的存在而构成高度风险。

随着问题现已完全公开，黑客也已心知肚明。整个互联网正在展开一场竞速赛，赶在黑客发起攻击之前为数千万个网站打上补丁。这也正是 NSA 建议的由由所在：如果无法立即修补 PHP 网站，最好先将其离线，直到修补完毕。

The U.S. National Security Agency’s sent out an alarming warning on Wednesday that two critical holes had been found in PHP, with patches already issued by the PHP Foundation.

PHP is a server-side programming language so widely used for web applications that it powers roughly 70% of the websites on the internet; by some accounts, that’s more than 33 million sites. It is also used by popular content management systems like WordPress.

The NSA warned that these holes are so severe that if a website can’t be patched immediately, it should be pulled off the web until it can be. The holes allow attackers to infiltrate the server’s file system or a database that may be used by the web app.

Interestingly, these holes have been tucked away in all versions of PHP since version 5, which was released in 2004. Websites not running relatively current versions of PHP will have some updating work to do, as PHP 8.1 and older versions are no longer supported. The recommendation is to update the web server to the current version of PHP, which is 8.5.12.

So how did two such ubiquitous, decades-old flaws that affect nearly every website on the internet suddenly come to light? AI, naturally, particularly via OpenAI and Google’s Wiz.

Security testing company Calif was engaged in OpenAI’s “Patch the Planet” initiative to find flaws in open source software. Using GPT‑5.6 Sol, it found one of the flaws, OpenAI disclosed in a blog post. Separately, the Wiz team also used AI, namely its Wiz Atlas security AI agent, Gemini 4 Argon, and GPT-5.6 Sol to find multiple vulnerabilities in PHP.

Both OpenAI and Wiz followed responsible security research practices and worked with PHP on patches before publicly disclosing the flaws. Then they all worked together to flesh out what they found, and test the patches, drawing in a host of others to help.

Wiz thanked Automattic, Akamai, AWS, Cloudflare, Fastly, Imperva, Microsoft, and Vercel. (While WordPress sites use PHP, WordPress has issued a statement saying that the flaw isn’t WordPress specific, and sites running its CMS must patch their servers and work with their web-hosting companies to ensure their sites are protected.)

OpenAI says that these flaws were found by researchers before hackers discovered them. So there were no reports of exploits in the wild. This is also in part because, before AI, these flaws were too hard for hackers to exploit. “With AI this is no longer a barrier. LLMs can help adapt an exploit to different PHP versions, configurations and memory layouts,” Wiz warned in its blog about the flaws.

In other words, this is the kind of security issue that was found and prevented because of AI, but is also a high risk only because of AI.

Now that the issue has been disclosed, hackers are fully in the know. The race is on for the internet to patch tens millions of websites before hackers can attack the unpatched ones. Hence the NSA’s guidance that if you can’t patch your PHP website right away, you’re better off pulling it offline until you can.