{"slug": "openai-uncovers-remote-code-execution-flaw-in-brotli-compression-library", "title": "OpenAI uncovers remote code execution flaw in Brotli compression library", "summary": "OpenAI researchers disclosed CVE-2026-111497, a high-severity out-of-bounds write in the Brotli compression decoder dubbed \"Node2Shell\" that enables unauthenticated remote code execution on both client and server sides and carries a CVSS score of 9.2. Node.js shipped patched versions 22.23.4, 24.22.1 and 26.12.1 on October 21, 2026, addressing the flaw plus nine additional vulnerabilities including multiple TLS hostname-check bypasses, while Bun versions prior to 1.4.4, Envoy and several PyPI Python packages remain affected. As of October 23, 2026, there was no public evidence of widespread exploitation, but proof-of-concept code has emerged and Imperva researchers demonstrated reliable exploitation against affected Node.js builds; the root-cause fix was committed to Brotli's source in February 2026, months before formal disclosure in October 2026.", "body_md": "OpenAI official logo (public domain, Wikimedia Commons) — CryptoBriefing brand treatment\n\n# OpenAI uncovers remote code execution flaw in Brotli compression library\n\nThe bug, dubbed Node2Shell, has pushed Node.js, Bun, Envoy and Python package maintainers to ship security updates\n\n[OpenAI](https://cryptobriefing.com/markets/openai/) went looking for security holes and found a big one in an unexpected place: Brotli, a widely used compression library that quietly sits inside a long list of software projects.\n\nThe flaw allows remote code execution. That means an attacker could potentially run their own commands on a target machine. OpenAI disclosed it to affected projects, and Node.js is among those now pushing out security updates.\n\n## What OpenAI found\n\nThe vulnerability is tracked as CVE-2026-111497 and carries a nickname, “Node2Shell,” because every serious bug apparently needs branding now. OpenAI researchers reportedly turned it up during internal security assessments of the Brotli decoder.\n\nThe problem lives in that unsealing step. Researchers traced it to an out-of-bounds write, which can be triggered by compressed input that has been crafted with malicious intent.\n\nA booby-trapped package can trick the decoder into writing data into memory it was never supposed to touch. Once an attacker can scribble outside the lines like that, running their own code is often the next stop.\n\nThe flaw is rated high severity with a critical CVSS score of 9.2. CVSS is the industry’s standard scale for grading vulnerabilities, and scores at that level tend to send security teams scrambling.\n\nTwo details make the rating especially uncomfortable. The attack is unauthenticated, so no login is needed. And it can hit both the client side and the server side, which covers apps fetching data and the machines serving it.\n\n## Who has to patch, and how fast\n\nAfter discovery, the bug was reported to several key projects, setting off a coordinated response. Node.js released patched versions 22.23.4, 24.22.1 and 26.12.1 on October 21, 2026.\n\nThose releases weren’t a one-issue affair. The same security update addressed nine additional vulnerabilities, including multiple TLS hostname-check bypasses, so the patch window is busier than usual.\n\n### AI, tech, and the markets they move—in one daily briefing.\n\nDaily. Free. Join 34,000+ readers across crypto, finance, and policy.\n\nNode.js isn’t alone. Bun versions prior to 1.4.4 are affected, as is Envoy, along with several Python packages on PyPI.\n\nExposure is highest for applications that use **fetch()**, Express 5 with body-parser, or that decompress untrusted Brotli data directly.\n\nAs of October 23, 2026, there was no public evidence of widespread exploitation. That’s the good news.\n\nThe less good news: proof-of-concept code has emerged. Researchers at Imperva have also demonstrated that the vulnerability can be reliably exploited against affected Node.js builds.\n\n## A fix that waited months for its moment\n\nThe timeline has an odd wrinkle. The root cause fix was committed to Brotli’s source code back in February 2026. The issue wasn’t formally disclosed until October 2026.\n\nThat gap reflects a structural headache in open source. Many applications bundle their own copy of Brotli instead of relying on the version installed on the operating system.\n\nSo fixing the library upstream is only step one. Every project carrying a private copy has to pull in the change, cut a release, and then convince users to actually install it.\n\nThis dynamic helps explain why coordinated disclosure matters. Reporting the bug directly to downstream projects like Node.js gave maintainers a chance to prepare fixes before the details went fully public.\n\n## What this means\n\nFor engineering teams, the immediate task is unglamorous but urgent: figure out where Brotli lives in the stack. That includes bundled copies inside runtimes, proxies and Python dependencies, not just the obvious places.\n\nTeams running Node.js should move to the patched 22.23.4, 24.22.1 or 26.12.1 releases. Bun users on anything older than 1.4.4 have a similar to-do item, and Envoy and PyPI package users need to check their versions.\n\nPrioritization is fairly clear from the research. Any service that accepts or fetches compressed data from sources it doesn’t control should go to the front of the line.\n\n**Disclosure:** This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our\n\n[Editorial Policy](https://cryptobriefing.com/editorial-policy/).", "url": "https://wpnews.pro/news/openai-uncovers-remote-code-execution-flaw-in-brotli-compression-library", "canonical_source": "https://cryptobriefing.com/openai-brotli-remote-code-execution-vulnerability/", "published_at": "2026-10-23 23:05:31+00:00", "updated_at": "2026-10-23 23:12:09.650986+00:00", "lang": "en", "topics": ["ai-safety", "developer-tools", "artificial-intelligence"], "entities": ["OpenAI", "Brotli", "Node.js", "Bun", "Envoy", "PyPI", "Imperva", "CVE-2026-111497"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/openai-uncovers-remote-code-execution-flaw-in-brotli-compression-library", "markdown": "https://wpnews.pro/news/openai-uncovers-remote-code-execution-flaw-in-brotli-compression-library.md", "text": "https://wpnews.pro/news/openai-uncovers-remote-code-execution-flaw-in-brotli-compression-library.txt", "jsonld": "https://wpnews.pro/news/openai-uncovers-remote-code-execution-flaw-in-brotli-compression-library.jsonld"}}