OpenAI red-teaming finds unauthenticated remote code execution in Brotli; disclosure, new releases and a CVE
From the AI digest for 2026-10-24
Thread: Patch the Planet: OpenAI models in the critical PHP flaw disclosure · continuing
What happened: On October 23 at about 6:55 PM ET, OpenAI published a disclosure (OpenAI on X) that a red-teaming exercise found a vulnerability allowing unauthenticated remote code execution in Brotli, a compression library included in many pieces of software such as Node.js, Bun and Envoy. An attacker could run their own code on affected systems by sending — or replying with — malicious compressed data, with no need to create a user account: an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as curl --compressed) by a malicious server.
What's genuinely new: The flaw is new as a security finding, and the disclosure mechanics matter as much as the bug. The root cause was actually fixed in the Brotli source code in February 2026, but it was not known at the time to be exploitable and no newer Brotli release carried it; because Brotli is built into other software, anything embedding the library needs the update too, and then that software's own users. OpenAI disclosed to Brotli and downstream projects such as Node.js, which have released or are releasing security updates, and Brotli cut new release versions and published a CVE. Patch and mitigation details are at a project page on the initiative's own site. This is the second industry-wide flaw under the Patch the Planet banner after the October 21 PHP disclosure — the initiative is starting to look like a standing flaw pipeline rather than a one-off.
Watch: The CVE identifier and its severity rating; whether downstream embedders beyond Node.js ship updates quickly; and any exploitation telemetry on the scale of the PHP2Shell episode, where edge-provider stats showed attempted exploitation ramping from thousands to millions of requests inside two hours of public announcement.
Links: OpenAI on X