# @unusual_whales: OpenAI says it found a critical Brotli flaw affecting Node.js,

Source: https://x.com/unusual_whales/status/2113770927599272075
Kiwi News: https://news.kiwistand.com/stories/unusualwhales-OpenAI-says-it-found-a-critical-Brotli-flaw-affecting-Nodejs?index=0x6adc657cd9dd08d8b5ccd477c42ddaf6555ddf52dffe46fd3435dda4b15a4b404267fd28
Submitted by tim on 2026-10-24 UTC, 1 upvote, 0 comments

BREAKING: OpenAI says it found a critical flaw in Brotli, a widely used compression library built into software like Node.js, Bun and Envoy.

The bug could let an attacker take over a system just by sending it malicious compressed data, with no login needed. That works both ways: a hacker could hijack an unpatched server, or a malicious server could hijack an unpatched user’s device.