CH
Product
chrome-devtools-mcp
by Google · last CVE Oct 28, 2026
3
CVEs
0
On KEV
6.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add chrome-devtools-mcp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53765
6.1
0%
Jun 24
chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory
Affected: 0.20.0 before 1.1.0
CVE-2026-53766
6.1
0%
Jun 24
chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots
Affected: 0.24.0 before 1.1.0
Showing 2