Skip to content
OpenAdvisories

Product · browserstack

browserstack-cypress-cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • High 7.8
    CVE-2026-48723

    BrowserStack Cypress CL: Command Injection via cypress_config_file leads to arbitrary code execution through malicious browserstack.json

    The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36.4 are vulnerable to OS command injection via the cypress_config_file configuration parameter. In readCypressConfigUtil.js, the l…

    browserstack browserstack-cypress-cli