OpenAI discovered a vulnerability enabling unauthenticated remote code execution in the Brotli compression library during red-team testing.

OpenAI reported discovering a vulnerability in the Brotli compression library during a red-team exercise. Both financialjuice and Financial_Express carried messages attributing the finding to OpenAI.

The reported impact was unauthenticated remote code execution. The messages identify Brotli as the affected software component but provide no affected version range, vulnerability identifier, or technical exploit conditions.

The supplied Brotli-specific reports do not state whether a patch was released, whether exploitation occurred outside testing, or which systems were exposed. They also do not identify the model or tooling used to discover this particular vulnerability, so it cannot be assigned to a specific OpenAI model from the available evidence.