Security researchers have demonstrated a Remote Code Execution vulnerability affecting official Node.js builds. By feeding specially crafted Brotli data (CVE-2026-111497) into the bundled decoder, attackers can execute arbitrary code, necessitating immediate patching for administrators managing affected environments.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →