Return to Threats

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

thehackernews.com 2026-10-23 AI supply chain Critical
Run AI Security Assessment Talk to AI CISO

Executive Summary

Researchers demonstrated remote code execution against an official Node.js build by supplying crafted Brotli data. Teams operating AI agents or LLM applications on Node.js should identify affected deployments and review their software supply chain exposure.

What Happened

Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feeding crafted data to the bundled Brotli decoder (CVE-2026-111497). Node.js disclosed the flaw

Affected Products

  • Node.js 24.22.0
  • Brotli decoder
  • Node.js official Linux arm64 image

Vulnerability / Attack Technique

Remote code execution through crafted Brotli data

Technical Mechanism

Crafted Brotli data is processed by the bundled Brotli decoder in an official Node.js build. The Node2Shell proof of concept caused attacker-supplied code to run on the official Node.js 24.22.0 Linux arm64 image without a debugger or custom build.

AI Security Category

LLM03:2025 Supply Chain

Part of the AI Supply Chain and AI SBOM topic.

Relevant Frameworks

LLM03:2025 Supply ChainMITRE ATLAS: Execution

RealGround Analysis

This issue is not described as an AI-specific vulnerability, but it may affect AI agents and LLM applications that run on Node.js or package Node.js-based dependencies. A compromised runtime or decoder could undermine application integrity, so teams should map runtime components and verify remediation across agent and LLM application environments.

Recommended Controls

  • Inventory Node.js versions and bundled Brotli components across AI agent and LLM application environments.
  • Identify deployments using the official Node.js 24.22.0 Linux arm64 image.
  • Apply the Node.js remediation disclosed for CVE-2026-111497 when available.
  • Restrict and validate untrusted compressed-data inputs before Brotli decoding.
  • Include Node.js runtime and native decoder components in AI application SBOMs and vulnerability monitoring.

Related RealGround Service

AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.

Sources

thehackernews.com: https://thehackernews.com/2026/10/researchers-demonstrate-node2shell-rce.html

Summary and analysis written by RealGround from the source above; last updated 2026-10-23.

Talk to AI CISO