| शीर्षक | AgentDeskAI browser-tools-mcp <=2.0.0 OS Command Injection |
|---|
| विवरण | ### Summary
browser-tools-server opened a WebSocket server that bound all network
interfaces, required no authentication, and performed no origin check. A
file path taken from a WebSocket message was interpolated into a shell
command. Any web page the user visited, or any host on the same network,
could execute arbitrary commands as the user.
### Impact
Full remote code execution as the user running the server. Because the
listener bound x.x.x.x rather than loopback, the attack did not require
the victim to visit anything — any host on the same LAN or shared Wi-Fi
could reach it directly.
Secondary impact, from the same missing authentication: any visited page
could read captured console output and full HTTP request and response
bodies (including Authorization and Cookie headers), trigger and
retrieve screenshots of the logged-in session, write arbitrary bytes to
arbitrary filesystem paths, and overwrite server settings. |
|---|
| स्रोत | ⚠️ https://github.com/AgentDeskAI/browser-tools-mcp/security/advisories/GHSA-xvrv-w8pg-f25f |
|---|
| उपयोगकर्ता | researchersongwu (UID 100991) |
|---|
| सबमिशन | 05/09/2026 03:32 PM (30 दिन पहले) |
|---|
| संयम | 02/10/2026 05:29 AM (27 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 359639 [AgentDeskAI browser-tools-mcp तक 1.2.0 browser-connector.ts अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|