Product

Browser-Operator-Core (<= 0.6.0)

1 brief RSS

BrowserOperator Core Path Traversal Vulnerability (CVE-2026-7234)

A path traversal vulnerability (CVE-2026-7234) exists in BrowserOperator browser-operator-core up to version 0.6.0, allowing remote attackers to read arbitrary files by manipulating the request.url argument in the startsWith function of scripts/component_server/server.js.

browser-operator-core path-traversal web-application cve-2026-7234

2r 1t 1c 6d ago