Beveiligingsadvies

CVE-2026-92811

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 20:32:57

Laatst bijgewerkt 2026-09-16 20:32:57

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

browserless versions 1.44.0 through 2.56.7 fail to enforce file protocol restrictions in Playwright websocket endpoints, allowing authenticated token holders to read arbitrary files. Attackers can navigate Playwright-driven browsers to file scheme URLs and access files accessible to the container process despite the ALLOW_FILE_PROTOCOL setting defaulting to false.

← Alle CVE's bekijken Bekijk op cve.org ↗