Node2Shell: Remote Code Execution via a Brotli Decoder Flaw

SentinelOne BlogOctober 30, 2026Vulnerabilities AppSec

Read the breakdown on how the Node2Shell vulnerability in Google's Brotli decoder enables remote code execution across Node.js, Bun, and .NET, and how to mitigate the risk.

Summary from SentinelOne Blog.

Read the full article at SentinelOne Blog

Explained

The technology and terms in this story. Learn more

AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.

Node2Shell: Remote Code Execution via a Brotli Decoder Flaw

Explained

More in Vulnerabilities

Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)

MongoDB security advisory (AV26-1107)

HashiCorp security advisory (AV26-1106)

Drupal security advisory (AV26-1105)

TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them