Skip to content
OpenAdvisories

Vendor

browserless

1 known vulnerabilities.

Products

browserless 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-92811

    browserless 1.44.0 through 2.56.7 File Protocol Restriction Bypass

    browserless versions 1.44.0 through 2.56.7 fail to enforce file protocol restrictions in Playwright websocket endpoints, allowing authenticated token holders to read arbitrary files. Attackers can navigate Playwright-driven browsers to file scheme URLs and ac…

    browserless browserless