OpenAI says red-teaming found unauthenticated RCE flaw in Brotli compression library

OpenAI says its red-teaming exercise found a vulnerability allowing unauthenticated remote code execution in Brotli, a widely-deployed compression library included in software such as Node.js, Bun and Envoy.

Detected & updated continuously · Source: Nebula