Google'ning Brotli ma'lumot siqish kutubxonasidagi zaiflik, CVE-2026-111497 raqami bilan kuzatilgan va Node2Shell deb nomlangan, Microsoft, Node.js loyihasi va ikkita Python paketi saqlovchilari tomonidan xavfsizlik yangilanishlariga olib keldi.
Node.js va Python paketlari o'tgan hafta tuzatildi, Microsoft esa 25-oktabrda .NET, Visual Studio va PowerShell uchun tuzatishlar bilan ergashdi. Bun, Envoy va Istio ham yangilandi.
Brotli veb orqali yuboriladigan ma'lumotlarni siqish uchun mashhur tanlov bo'lib, uning dekoderi ko'plab ilovalar va kutubxonalarga o'rnatilgan.
Chegaradan tashqari yozish (out-of-bounds write) sifatida tavsiflangan bu xato Brotli 1.0.3 dan 1.2.0 gacha bo'lgan versiyalarni ta'sir qiladi. Google unga CVSS v4 bo'yicha 9.2 ball berdi, bu esa uni tanqidiy (critical) toifaga kiritadi. Brotli 1.0.10, 1.1.1 va 1.2.1 versiyalarida tuzatish mavjud.
Node.js loyihasi maxsus tayyorlangan kiritish dekoder tomonidan ishlatiladigan bufer chegaralaridan tashqariga ma'lumotni surishi mumkinligini aytdi. Natijada yuzaga keladigan xotira buzilishi jarayonning ishdan chiqishiga yoki xotira mazmunining sizib chiqishiga olib kelishi mumkin, shuningdek autentifikatsiyadan o'tmagan hujumchiga ixtiyoriy kodni bajarish imkonini berishi mumkin.
Node.js bu kashfiyotni OpenAI Codex Security a'zolariga bog'ladi. OpenAI ma'lumotiga ko'ra, muammo qizil jamo (red-teaming) ishi davomida aniqlangan, shundan so'ng kompaniya Brotli ishlab chiquvchilari va kutubxonaga tayanadigan loyihalarni xabardor qilgan.
OpenAI tuzatish oshkor qilishdan oldin amalga oshirilganini ta'kidladi. "Bu asosiy sabab muammosi aslida Brotli manba kodida fevral oyida tuzatilgan edi, lekin o'sha paytda bu xavfsizlik zaifligiga olib kelishi ma'lum emas edi va Brotli'ning yangiroq relizi yo'q edi", deb aytdi AI kompaniyasi.
Rasmiy Node.js tasvirida kod bajarilishi namoyish etildi
Imperva Linux arm64 uchun rasmiy Node.js 24.22.0 tasvirida kod bajarilishi mumkinligini ko'rsatdi. Uning tadqiqotchilari zararli ma'lumotni maqsadli ilova tomonidan olingan server javobida ham, Express 5 yoki body-parser 2 tomonidan qayta ishlangan so'rov tanasida ham yuborishdi.
"Isbot har doim muvaffaqiyatli bo'lmadi. Bizning natijalarimiz sinovdan o'tgan Linux arm64 qurilmasi va ilova sozlamalari uchun kod bajarilishini tasdiqlaydi va tuzatilgan qurilma xuddi shu kiritishlarni qanday qayta ishlaganini ko'rsatadi", deb aytdi Imperva. Xavfsizlik firmasi o'z eksploitini ommaga e'lon qilmagan.
Hujumlar faqat zararli Brotli ma'lumotlari dekoderga yetib borganda ishlaydi, masalan, ilova nomidan siqilgan mazmunni ochadigan kutubxona orqali. "Hujumchi nazoratidagi ma'lumotni ta'sirlangan Google Brotli dekoderiga uzatadigan har qanday ilova ta'sirlanishi mumkin. Bu siqilgan HTTP so'rov tanalari, ishonchsiz serverlardan olingan javoblar va siqilgan fayllarni o'z ichiga oladi", deb aytdi OpenAI'ning Patch the Planet tashabbusi o'z maslahatida.
Hozircha yovvoyi tabiatda (in the wild) ekspluatatsiya haqida xabar berilmagan. GitHub'da e'lon qilingan isbot-konsept eksploit faqat ataylab zaiflashtirilgan qurilma qarshi kod bajarilishini ta'minlaydi, va ba'zi tadqiqotchilar xato faqat xizmatni rad etish (DoS) hujumlari uchun ishlatilishi mumkinligini ta'kidladilar.
Microsoft mahsulotlari va Python paketlari ta'sirlangan
Microsoft'ning 25-oktabrdagi yangilanishlari .NET runtime versiyalari 8.0.33, 9.0.22 va 10.0.14, shuningdek .NET 11 Release Candidate 3 ni o'z ichiga oladi. Visual Studio 2019, 2022 va 2026, shuningdek PowerShell 7.4, 7.5 va 7.6 ham yangilandi.
Microsoft CVE-2026-111497 ni CVSS v3.1 bo'yicha 8.1 asosiy ball bilan imtiyozlarni oshirish (elevation of privilege) muammosi sifatida tasniflagan. U xatoni .NET va Visual Studio uchun tanqidiy, PowerShell uchun muhim deb baholaydi va ekspluatatsiya ehtimolini "Exploitation More Likely" (Ekspluatatsiya ehtimoli yuqori) deb baholaydi.
Python holatida zaif dekoder ikkita PyPI paketi — Brotli va brotlicffi — ichiga o'rnatilgan. Ular 1.2.1 va 1.2.1.0 versiyalari bilan mos ravishda tuzatilgan.
Ta'sirlangan dasturiy ta'minot ko'paygani sari tadqiqotchilar xatoni HTTP2Shell va Broccoli2Shell deb ham atay boshladilar.
Brotli dekoderining o'z nusxasini o'z ichiga olgan dasturiy ta'minotning ommaviy kuzatuvchisi hali ham tuzatilmagan bir nechta loyihalarni, jumladan DuckDB, Apache Arrow, 7-Zip-zstd, p7zip va EDK II ni ro'yxatga oladi. Uning saqlovchilari ro'yxat to'liq emasligini va bu loyihalarning har bir konfiguratsiyasi zaif kodni ochib bermasligini aytishadi.
Yangilanishlarni qo'llash ham ta'sirlangan xizmatlarni qayta ishga tushirish va tuzatilgan asos ustida konteyner tasvirlarini qayta qurishni talab qiladi, chunki allaqachon ishlayotgan jarayonlar zaif koddan foydalanishda davom etadi.
Bog'liq: Mirai Botnet Operatorlari PHP2Shell Hujumlariga Qo'shiladi, ASLR Bypass Eksploitlari Paydo Bo'ladi
Bog'liq: To'rt Oy Ichida Uchinchi Arista VCO Zero-Day Hujumchilari Tomonidan Ekspluatatsiya Qilinadi
Bog'liq: LiteLLM Yangi Ta'minot Zanjiri Hujumida Buziladi
A vulnerability in Google’s Brotli data compression library, tracked as CVE-2026-111497 and dubbed Node2Shell, has led to security updates from Microsoft, the Node.js project and the maintainers of two Python packages.
Node.js and the Python packages were patched last week, and Microsoft followed on October 25 with fixes for .NET, Visual Studio and PowerShell. Bun, Envoy and Istio have also been updated.
Brotli is a popular choice for compressing data sent over the web, and its decoder is embedded in a long list of applications and libraries.
Described as an out-of-bounds write, the bug impacts Brotli 1.0.3 through 1.2.0. Google gave it a CVSS v4 score of 9.2, which puts it in the critical category. Brotli versions 1.0.10, 1.1.1 and 1.2.1 contain the fix.
The Node.js project said specially crafted input can push data beyond the limits of a buffer used by the decoder. The resulting memory corruption could cause the process to crash or leak memory contents, and could also allow an unauthenticated attacker to run arbitrary code.
Node.js credited the discovery to members of OpenAI Codex Security. According to OpenAI, the issue was uncovered during red-teaming work, after which the company notified the Brotli developers and the projects that rely on the library.
OpenAI noted that the fix predates the disclosure. “This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli,” the AI company said.
Code execution demonstrated on official Node.js image
Imperva has shown that it can be exploited for code execution on the official Node.js 24.22.0 image for Linux arm64. Its researchers sent the malicious data both in a server response retrieved by the targeted application and in a request body processed by Express 5 or body-parser 2.
“The proof did not succeed on every attempt. Our results establish code execution for the tested Linux arm64 build and application setups, and show how the fixed build handled the same inputs,” Imperva said. The security firm has not made its exploit public.
Attacks only work if malicious Brotli data reaches the decoder, for instance through a library that unpacks compressed content on the application’s behalf. “Any application that passes attacker-controlled data to an affected Google Brotli decoder may be exposed. This includes compressed HTTP request bodies, responses fetched from untrusted servers, and compressed files,” OpenAI’s Patch the Planet initiative said in its advisory.
No exploitation in the wild has been reported so far. A proof-of-concept exploit published on GitHub reportedly achieves code execution only against an intentionally weakened build, and some researchers argued the bug can only be used for denial-of-service (DoS) attacks.
Microsoft products and Python packages affected
Microsoft’s October 25 updates include .NET runtime versions 8.0.33, 9.0.22 and 10.0.14, along with .NET 11 Release Candidate 3. Visual Studio 2019, 2022 and 2026, as well as PowerShell 7.4, 7.5 and 7.6, have also been updated.
Microsoft has categorized CVE-2026-111497 as an elevation of privilege issue with a CVSS v3.1 base score of 8.1. It rates the flaw critical for .NET and Visual Studio and important for PowerShell, and its exploitability assessment is “Exploitation More Likely.”
In Python’s case, the vulnerable decoder is built into two PyPI packages, Brotli and brotlicffi. They have been patched with the release of versions 1.2.1 and 1.2.1.0, respectively.
As more affected software emerged, researchers began referring to the flaw as HTTP2Shell and Broccoli2Shell.
A public tracker of software that bundles its own copy of the Brotli decoder lists several projects that are still unpatched, including DuckDB, Apache Arrow, 7-Zip-zstd, p7zip and EDK II. Its maintainers say the list is incomplete, and that not every configuration of these projects necessarily exposes the vulnerable code.
Applying the updates also requires restarting affected services and rebuilding container images on top of a patched base, since processes that are already running keep using the vulnerable code.
Related: Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
Related: Attackers Exploit Third Arista VCO Zero-Day in Four Months
Related: LiteLLM Compromised in Fresh Supply Chain Attack