AIKIDO-2026-938696

TL;DR

tinypool reads the filename option of pool.run(task, options) through the prototype chain instead of checking for an own property. When Object.prototype.filename is polluted elsewhere in the process and a caller passes a user-supplied options object, the pool loads and executes an attacker-controlled worker module. This turns an existing prototype pollution primitive into arbitrary code execution in the worker pool. The fix reads run options from a null-prototype object so inherited filename values are ignored.