Critical Brotli decoder bug hits PyPI too: Python2Shell joins Node2Shell RCE
banteg · x · 2026-10-24
- A critical GitHub advisory confirms the Brotli decoder out-of-bounds write (CVE-2026-111497) affects the PyPI brotli and brotlicffi packages, after Node.js' October security release already flagged it as "Node2Shell".
- The buffer overflow in c/dec/decode.c (Google Brotli 1.0.3–1.2.0, all platforms) lets a remote unauthenticated attacker corrupt adjacent decoder memory, leak sensitive memory, cause DoS, or potentially execute arbitrary code via a crafted compressed stream.
- Affected: brotli >= 1.0.3, < 1.2.1 and brotlicffi >= 1.0.3, < 1.2.1.0. Patched: brotli 1.2.1, brotlicffi 1.2.1.0 (upstream also shipped 1.0.10 and 1.1.1). Users should upgrade all Brotli libraries/binaries in the 1.0.3–1.2.0 range immediately.
- The attached screenshots show a root shell (uid=0) obtained on a research machine via the exploit.
Related event: Brotli Decoder Out-of-Bounds Write Flaw Hits Python Ecosystem(2 posts)→
More from Safety
- New Royal Society paper: EU AI policy should optimize for happiness — SandraWachter5 · 2026-10-26
- Is Browsing Safe After PHP2Shell? Security Expert: Patch PHP Servers Now — altryne · 2026-10-26
- AGMAI advises AI labs against designating mathematicians to vet model math outputs — AlexKontorovich · 2026-10-26
- Matthew Green: hard-to-reach vulnerable core code needs systematic AI-driven testing — matthew_d_green · 2026-10-26
- Zvi digests Gemini 4 Argon cards: 217-page safety report, 0.7% injection success — TheZvi · 2026-10-26
- Bitcoin-loaded honeypot site with $2,021 bounty hacked and drained in under 20 hours — Polymarket · 2026-10-26