# OpenAI CLI, Omnara, PHP2Shell, KLS proof, RFD4-Proteina > OpenAI ships an official CLI and lands on Google Cloud, Omnara opens up managed agents, AI helps find PHP bugs and prove the KLS conjecture. Published 22 Oct 2026. Coverage: 21 Oct 2026 to 22 Oct 2026. By Ali Asif. ## Items 1. **OpenAI CLI** (OpenAI, Agents and coding): An Apache-2.0 command-line tool for the OpenAI REST API with resource-style commands, json and jsonl output, GJSON transforms, file uploads, image generation and shell completion. [Primary source](https://github.com/openai/openai-cli) 2. **OpenAI models are coming to Google Cloud** (OpenAI, Policy and business): OpenAI and Google Cloud are bringing frontier models and Codex workflows to Gemini's Model Garden, available through Google Cloud Marketplace. [Primary source](https://openai.com/index/openai-models-google-cloud) 3. **Omnara** (Omnara, Agents and coding): An Apache-2.0, self-hostable managed agent platform that runs agents on any model and any machine, with durable steps, cron schedules, MCP servers, subagents and Slack, Discord and GitHub integrations. [Primary source](https://github.com/omnara-ai/omnara) 4. **PHP2Shell** (Wiz Research, Science): Four memory-safety bugs in the PHP engine tracked as CVE-2026-109618 and CVE-2026-109619, up to CVSS 9.2, found with AI models and patched by PHP on October 21. [Primary source](https://www.wiz.io/blog/php2shell-php-rce) 5. **Solving the KLS conjecture** (Microsoft Research, Science): A proof that the 1995 Kannan-Lovasz-Simonovits bound holds with a constant independent of dimension, found through a human-directed search of about 100 agent trajectories. [Primary source](https://www.microsoft.com/en-us/research/blog/solving-a-31-year-old-grand-challenge-in-mathematics-the-kls-conjecture) 6. **RFD4-Proteina** (NVIDIA, Open weights): An open BioNeMo model, built with the Institute for Protein Design, that co-designs sequence and all-atom structure, with 200-residue latency of 1.35 s against 5.12 s for RFD3. [Primary source](https://developer.nvidia.com/blog/design-proteins-with-rfd4-proteina-using-reward-guided-inference-time-search) Today's log mixes developer tooling with two results where AI did real work on hard problems. As usual I read the primary pages and ran none of the code, so the figures below are what each publisher reports. ## PHP2Shell from Wiz Research The biggest story for anyone who runs a website. Wiz Research reports memory-safety flaws in the PHP engine tied to how it handles fatal errors, especially out-of-memory errors during a request. They are grouped under CVE-2026-109618 and CVE-2026-109619, cover four related bugs and reach CVSS 9.2. Wiz says nearly every PHP version back to 5.4 is affected by at least one of them. The AI angle is in the method. Wiz used its own Wiz Atlas alongside Gemini 4 Argon and GPT-5.6 Sol, and says the models helped with discovery, exploit development, attack detection and patch validation, including adapting exploits to different PHP versions and memory layouts. Calif and OpenAI assisted with discovery, coordination and patch verification. Wiz demonstrated unauthenticated remote code execution against the latest WordPress, Drupal and Joomla container images at the time of testing. The timeline is the useful part: found August 19, reported to PHP August 24, acknowledged September 21, patched and disclosed October 21. Wiz says patching is the only complete fix, so if you run PHP, that is the task for today. ## The KLS conjecture Microsoft Research reports a proof of the Kannan-Lovasz-Simonovits conjecture, posed in 1995, which asks about cutting high-dimensional distributions. The bound holds with a constant that does not depend on dimension. Xinzhi Zhang and Zhao Song ran a human-directed agentic search of about 100 research trajectories, and Microsoft says unguided attempts with several leading models at a similar token budget fell short. The researchers chose directions and verified the proof. The post also notes independent proofs and a Lean 4 formalization. ## OpenAI CLI, OpenAI on Google Cloud, and Omnara OpenAI published an official command-line tool under Apache-2.0. Commands follow an `openai ` pattern, output can be text, json or jsonl, and `--help` works offline without a key. It is a small release, but scripting against the API gets easier. OpenAI also says its frontier models and Codex workflows are coming to Gemini's Model Garden through Google Cloud Marketplace. The page is short on detail, so I will wait for specifics. Omnara is an Apache-2.0 managed agent platform that works with OpenAI, Anthropic, OpenRouter, Bedrock and Ollama, keeps agent history in your own Postgres when self-hosted, and saves every step so agents resume after a crash. Its pricing and compliance comparison against Claude Managed Agents is the project's own claim. ## RFD4-Proteina NVIDIA and the Institute for Protein Design describe an open model that co-designs protein sequences and all-atom structures without a separate inverse-folding step. At 200 residues NVIDIA reports 1.35 s and 1.36 GB peak memory, against 5.12 s and 8.50 GB for RFD3. The tutorial shows PD-L1 binder design but reports no experimental binding results. ## What I'd watch next Whether the Google Cloud page gets real detail on models and pricing, how fast PHP hosts patch, and whether the KLS Lean verification lands as promised. ## My take The PHP2Shell and KLS posts are the two I would read first, because both are about AI finding things that humans then checked and fixed. I read each primary page and ran none of it, so every number here is the publisher's own. ## Sources - https://github.com/openai/openai-cli - https://openai.com/index/openai-models-google-cloud - https://github.com/omnara-ai/omnara - https://www.wiz.io/blog/php2shell-php-rce - https://www.microsoft.com/en-us/research/blog/solving-a-31-year-old-grand-challenge-in-mathematics-the-kls-conjecture - https://developer.nvidia.com/blog/design-proteins-with-rfd4-proteina-using-reward-guided-inference-time-search Canonical: https://heyaliasif.com/ai/2026-10-22-openai-cli-omnara-php2shell-kls-rfd4-proteina