CH
Product
chrome-devtools-mcp
3
CVEs
0
On KEV
6.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add chrome-devtools-mcp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53765 | 6.1 | Jun 24 | chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory Affected: 0.20.0 before 1.1.0 |
| CVE-2026-53766 | 6.1 | Jun 24 | chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots Affected: 0.24.0 before 1.1.0 |
| CVE-2026-106484 New | – | Oct 28 | Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file Affected: 1.1.0 before 1.5.0 |
Showing 3