All 2 CVE vulnerabilities found in chrome-devtools-mcp, with AI-generated Chinese analysis, references, and POCs.
Vendor: ChromeDevTools
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-53765 | chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory CWE-59 | 6.1 | Medium | 2026-06-24 |
| CVE-2026-53766 | chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots CWE-22 | 6.1 | Medium | 2026-06-24 |
All 2 known CVE vulnerabilities affecting chrome-devtools-mcp with full Chinese analysis, references, and POCs where available.