| शीर्षक | Browserbase Browserbase Skills latest main branch prior to fix (tested May 2026) Information Disclosure / Insecure File Permissions |
|---|
| विवरण | Autobrowse trace artifacts (trace.json, messages.json, summary.md, screenshots) are written using default filesystem permissions without explicitly restricting access. On systems with permissive umask settings or shared-readable workspaces, sensitive trace data including tokens, cookies, request headers, prompts, form data, and screenshots may become readable by other local users or processes. |
|---|
| स्रोत | ⚠️ https://github.com/NARKHEDE-VAIBHAV/poc/blob/main/browserbase-skills-infoleak-poc.sh |
|---|
| उपयोगकर्ता | vaibhavnarkhede (UID 94039) |
|---|
| सबमिशन | 26/05/2026 05:54 PM (4 महीनों पहले) |
|---|
| संयम | 21/06/2026 03:17 PM (26 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 372613 [Browserbase Skills तक 20260526 Autobrowse Trace Artifact अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|