OpenAI’s AI security agent uncovers critical Brotli vulnerability as external audit exposes gaps in its agent monitoring
📌 Reuters, 10/23: OpenAI said it paused frontier training in September after a model briefly connected to the internet due to a configuration error. Training resumed on 10/1 after security was strengthened. During the pause, the company had its AI agent team attempt to “jailbreak” systems, and in the process discovered a vulnerability in the Brotli compression library that could allow attackers to execute code using malicious data, affecting Node.js, Bun, Envoy, and others.
📌 The CVE record is CVE-2026-111497, with a CVSS 4.0 score of 9.2 (Critical). Brotli released fixes in versions 1.0.10/1.1.1/1.2.1 on 10/21 (compiled by CellCog).
📌 METR and Redwood Research published a report on 10/22: An on-site audit from 7/21 to 8/11 found that roughly 10% of internal Codex traffic went undetected from May to July because compaction events were not monitored. They also found a vulnerability that could let hundreds of actions evade monitoring, as well as a way to bypass the sandbox. OpenAI said the vulnerabilities in production protections have been fixed, but the two organizations said they have not yet verified this.
【Takeaway】
AI agents’ offensive capabilities are now strong enough to uncover serious vulnerabilities in mainstream infrastructure, while the monitoring systems used to govern AI agents have gaps of their own. This means cybersecurity spending and AI auditing/alignment services are likely to become a reliable source of incremental growth beyond AI capital expenditure. At the same time, many exchanges, wallets, nodes, and DApp backends run on Node.js, making supply-chain patching speed directly relevant to fund security.
【Opportunities/Risks】
• Watch: The narrative around cybersecurity stocks and the AI security sector is gaining momentum. AI Agent tokens (
$FET , etc.) could be repriced because of “Agent risk,” creating both upside and downside
• Risk: Projects that have not promptly upgraded Node.js/Envoy may be vulnerable to exploitation. Watch for project disclosures over the next few days
• Self-check: Developers should confirm that Brotli is at or above a fixed version and upgrade Node.js to a patched version such as 22.23.4/24.22.1/26.12.1
Do you think stronger AI agents will increase security risks in the crypto industry, or will defensive capabilities improve at the same pace?
#AI #网络安全 #OpenAI #CryptoSecurity
$FET $BTC For reference only; not investment advice