During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their
OpenAI red team finds Brotli remote code execution flaw
In a red-teaming exercise, OpenAI found an unauthenticated remote code execution vulnerability in Brotli, a widely deployed compression library used by Node.js, Bun, and Envoy.