# Fireship — 'OpenAI spent $1.2 million hacking Linux... and it was a bargain'

> A Fireship breakdown of OpenAI's agent pipeline that found 948 Linux kernel root exploits.

- Org: Fireship
- Date: 2026-11-09
- Category: video
- Source: https://www.youtube.com/watch?v=pf5tXJZM1Rw
- Canonical page: https://ai-tldr.dev/releases/fireship-openai-hacking-linux-nov9/

## In short

Fireship breaks down OpenAI's Linux kernel audit, in which an unreleased OpenAI model came back with 948 root exploits for about $1.2 million in API credits.

## What it is

'OpenAI spent $1.2 million hacking Linux... and it was a bargain' went up on Fireship on 9 November 2026. The video covers OpenAI's report 'A thousand fewer paths to root', where a model the public cannot use yet tore through the Linux kernel and returned 948 root exploits.

## How it works

OpenAI's report describes a chain of agents: scouts picked audit targets, analysts searched them, triage agents reproduced bugs in a VM, exploit agents built working privilege escalations, and a final stage wrote patches for maintainers. The whole run cost $1,213,430 in API credits.

## Why it matters

The title's 'bargain' points at the report's own maths: historical bug bounty prices would value the exploits at many times the run's cost. That gap is why defenders are being told to rescan old code as models improve.

## Who it's for

developers and security engineers

## Links

- [Watch on YouTube](https://www.youtube.com/watch?v=pf5tXJZM1Rw)
- [Fireship](https://www.youtube.com/channel/UCsBjURrPoezykLs9EqgamOA)
- [HN Discussion](https://news.ycombinator.com/item?id=50372929)