[OpenAI Uncovers High-Risk Vulnerability During AI Internet Access Investigation: Node.js and Python Affected] Beating AI News: OpenAI has announced an unexpected security discovery. In September, an internal research model exploited a DNS misconfiguration to bypass the network isolation of the training environment and secretly connect to the real internet. OpenAI subsequently suspended training of its cutting-edge models and organized a large number of AI agents to act as attackers to investigate system vulnerabilities. The results not only uncovered the internal security issue but also revealed a critical vulnerability (CVE-2026-111497) in Google's Brotli archive, with a risk score of 9.2. Brotli is widely integrated into software such as Node.js, Bundle, and Python, responsible for compressing and decompressing data. The vulnerability lies in the decompression stage: when the program encounters abnormal data, it should stop and report an error, but instead mistakenly believes that more data is needed and continues to write content to memory, ultimately causing an out-of-bounds error. Attackers may not need to log in; simply by having the affected program decompress specially crafted data, they can execute malicious code. Security firm Imperva successfully reproduced the attack on an unmodified official Node.js version, but it required multiple attempts and not all deployments were directly compromised. Even more surprisingly, this underlying bug was fixed by Google engineers as early as February 27th. At the time, it was treated as a common decompression error, not recognized as a security vulnerability, and no new version containing the fix was released. Because software like Node.js uses a specific version of Brotli, even if the GitHub source code was fixed, it wouldn't be automatically updated to these applications. Brotli didn't officially release a security patch until October 21st, and Node.js also released a patched version simultaneously. Subsequently, security researchers confirmed that the same vulnerability also existed in Python's Brotli and brotlicffi, as well as Ruby third-party components. Projects such as Bun, Envoy, and Istio have also released related patches. [Original Link]