Obsidian Security incident
Security Advisory: Node2Shell Vulnerability (CVE-2026-111497)
Ongoing since 09:01 PM UTC, affecting Security Advisory.
Security Advisory: Node2Shell Vulnerability (CVE-2026-111497) Published: Oct 27, 2026 Summary Obsidian Security has assessed the recently disclosed vulnerability known as Node2Shell (CVE-2026-111497), also referred to as HTTP2Shell. Our response We identified a limited number of affected services and are actively patching and redeploying them. As an immediate mitigation, we implemented Brotli content-encoding blocking at our production API gateways (completed Oct 26, 2026), protecting against Node2Shell and related HTTP2Shell variants. Customer Impact We have observed no customer impact to date. We will update this advisory once the patching is completed on our side. Questions For questions, please contact your Obsidian account team or support via [email protected] or the Admin Portal.
Affected components
Update timeline
- monitoring Oct 27, 2026, 09:01 PM UTC
Security Advisory: Node2Shell Vulnerability (CVE-2026-111497) Published: Oct 27, 2026 Summary Obsidian Security has assessed the recently disclosed vulnerability known as Node2Shell (CVE-2026-111497), also referred to as HTTP2Shell. Our response We identified a limited number of affected services and are actively patching and redeploying them. As an immediate mitigation, we implemented Brotli content-encoding blocking at our production API gateways (completed Oct 26, 2026), protecting against Node2Shell and related HTTP2Shell variants. Customer Impact We have observed no customer impact to date. We will update this advisory once the patching is completed on our side. Questions For questions, please contact your Obsidian account team or support via [email protected] or the Admin Portal.
Your product runs on more than Obsidian Security
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services