A Brotli Fix Sat Unreleased Since February. Node.js, Python and Envoy Are Patching One at a Time

A Brotli Fix Sat Unreleased Since February. Node.js, Python and Envoy Are Patching One at a Time

Google's Brotli decoder bug, CVE-2026-111497, was found by OpenAI's Codex Security team and fixed in the source code in February, but no release shipped the fix until Wednesday. Node.js, Bun, Envoy, Istio and Python's Brotli packages now have patched versions.

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-111497, the flaw allows crafted compressed data to overwrite past the end of a buffer and corrupt a program's memory, potentially

OpenAI Finds Remote-Code Flaw in Brotli Used by Node.js, Bun and Envoy

The flaw can let attackers compromise unpatched servers or clients that process compressed data.

BREAKING: OpenAI says it found a critical flaw in Brotli, a widely used compression library built into software like Node.js, Bun and Envoy.

The bug could let an attacker take over a system just by sending it malicious compressed data, with no login needed. That works both ways: a hacker could hijack an unpatched server, or a malicious server could hijack an unpatched user’s device. “During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software …