browse-mcp vulnerabilities
1 known vulnerability in browse-mcp from That1Drifter. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest first
- 8.6 High severity
browse-mcp: Improper Limitation of a Pathname to a Restricted Directory
browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browser_download writes a fetched response body to join(save_dir, filename) without validating the caller-controlled save_dir, while browser_save_state and bro