Tag: imperva
2 articles
Node.js Flaw Exploited via Crafted Brotli Data
Security researchers at Imperva have discovered a vulnerability in Node.js, dubbed Node2Shell, which allows attackers to run malicious code by feeding crafted Brotli data to the runtime's decoder, putting systems at risk. This flaw, tracked as CVE-2026-111497, was successfully exploited on a standard Node.js image, but has since been patched in version 24.22.1.
OpenClaw AI Agent Exposes Sensitive Data to Hidden Attacks
A critical vulnerability in OpenClaw AI, known as OpenClaw 2026.4.23, allowed hackers to hide malicious instructions within shared contacts, vCards, or location pins, which the AI agent then obediently followed. This shocking security flaw was recently patched, but highlights the importance of staying vigilant against emerging threats.