AIKIDO-2026-994752

TL;DR

The @lexical/yjs collaboration binding applies remote node-state and property attributes received from other peers. Unknown attributes are written directly from the deserialized payload, so a malicious peer can send a __proto__ attribute that pollutes the object prototype during a collaborative session. This can inject or override state values that the application later reads. The fix applies a guard that skips __proto__, constructor, and prototype keys when importing remote attributes.