{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/@storybook/addon-mcp--10.6.0--10.6.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-114126"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["storybook (\u003e= 8.0.0, \u003c 8.6.19)","storybook (\u003e= 9.0.0, \u003c 9.1.21)","storybook (\u003e= 10.0.0, \u003c 10.6.2)","storybook (\u003e= 11.0.0-alpha.0, \u003c 11.0.0-alpha.6)","@storybook/core (\u003e= 8.0.0, \u003c 8.6.19)","@storybook/core-server (\u003e= 8.0.0, \u003c 8.6.19)","@storybook/experimental-addon-test (\u003e= 8.0.0, \u003c 8.6.19)","@storybook/addon-vitest (\u003e= 9.0.0, \u003c 9.1.21)","@storybook/addon-vitest (\u003e= 10.0.0, \u003c 10.6.2)","@storybook/addon-vitest (\u003e= 11.0.0-alpha.0, \u003c 11.0.0-alpha.6)","@storybook/addon-mcp (\u003e= 10.6.0, \u003c 10.6.2)","@storybook/addon-mcp (\u003e= 11.0.0-alpha.0, \u003c 11.0.0-alpha.6)"],"_cs_severities":["high"],"_cs_tags":["rce","webserver","storybook","vulnerability"],"_cs_type":"advisory","_cs_vendors":["Storybook"],"content_html":"\u003cp\u003eStorybook development servers are vulnerable to remote code execution (CVE-2026-114126) when accessible from an untrusted local network. An attacker can access the Storybook dev server by IP address, bypass WebSocket authentication, and interact with the server's WebSocket API. This access permits the injection of malicious code into story files or the triggering of file operations through the Vitest addon. The vulnerability is mitigated by upgrading to patched versions, which enforce stricter host binding (loopback only) and restrict dangerous filesystem/process execution APIs within the Vitest addon.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker connects to the same local network (LAN/WiFi) as a developer running a Storybook dev server.\u003c/li\u003e\n\u003cli\u003eAttacker probes the local network to locate active Storybook dev server instances.\u003c/li\u003e\n\u003cli\u003eAttacker accesses the Storybook web UI via browser or client request, causing the browser to load the vulnerable page.\u003c/li\u003e\n\u003cli\u003eAttacker extracts the WebSocket authentication token exposed by the vulnerable server.\u003c/li\u003e\n\u003cli\u003eAttacker authenticates to the WebSocket API using the stolen token.\u003c/li\u003e\n\u003cli\u003eAttacker sends a malicious request to the \u003ccode\u003esaveStoryRequest\u003c/code\u003e event to write a payload into a story file.\u003c/li\u003e\n\u003cli\u003eAttacker triggers a test execution cycle via the WebSocket.\u003c/li\u003e\n\u003cli\u003eIf the Vitest addon is installed, the injected payload leverages the addon API to write arbitrary files or execute processes on the developer machine.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows unauthorized parties to perform arbitrary file writes and execute code on developer workstations. The impact is elevated if the Vitest addon is present and configured with unrestricted filesystem or execution permissions.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Storybook packages immediately: 11.0.0-alpha.6, 10.6.2, 9.1.21, or 8.6.19.\u003c/li\u003e\n\u003cli\u003eAudit existing environments and ensure development servers bind only to '127.0.0.1' unless explicitly required for shared network testing.\u003c/li\u003e\n\u003cli\u003eRestrict access to development machines using local host-based firewalls to prevent unauthorized ingress from untrusted network peers.\u003c/li\u003e\n\u003cli\u003eReview and disable 'browser.api.allowWrite' and 'browser.api.allowExec' in Vitest configurations if these capabilities are not required for development workflows.\u003c/li\u003e\n\u003cli\u003eAvoid using the '--host' CLI option with insecure interfaces (e.g., '0.0.0.0') on untrusted local networks.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-22T20:02:53Z","date_published":"2026-10-22T20:02:53Z","id":"https://feed.craftedsignal.io/briefs/2026-10-storybook-rce/","summary":"The Storybook development server exposes authentication tokens via WebSocket, allowing attackers on the same local network to inject malicious code into story files and execute arbitrary commands through vulnerable addons.","title":"Storybook: Remote code execution via local network WebSocket token theft (CVE-2026-114126)","url":"https://feed.craftedsignal.io/briefs/2026-10-storybook-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - @Storybook/Addon-Mcp (\u003e= 10.6.0, \u003c 10.6.2)","version":"https://jsonfeed.org/version/1.1"}