ByteDance Coze Scraper Extension up to 2.0.2 External Message index.js chrome.runtime.onMessageExternal.addListener authorization

Summaryinfo

A vulnerability was found in ByteDance Coze Scraper Extension up to 2.0.2. It has been rated as problematic. Affected by this issue is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. This manipulation of the argument body.url/paginationConfig/xPathConfig/body.urls/xPaths causes authorization. This vulnerability appears as CVE-2026-96680. The attack may be initiated remotely. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Detailsinfo

A vulnerability was found in ByteDance Coze Scraper Extension up to 2.0.2. It has been declared as problematic. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument body.url/paginationConfig/xPathConfig/body.urls/xPaths with an unknown input leads to a authorization vulnerability. The CWE definition for the vulnerability is CWE-862. The product does not perform an authorization check when an actor attempts to access a resource or perform an action. As an impact it is known to affect confidentiality.

It is possible to read the advisory at github.com. This vulnerability is known as CVE-2026-96680. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details and also a public exploit are known.

It is possible to download the exploit at github.com. It is declared as proof-of-concept. The vendor was contacted early about this disclosure but did not respond in any way.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• ByteDance

Name

• Coze Scraper Extension

Version

• 2.0.0
• 2.0.1
• 2.0.2

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #904123: ByteDance Coze Scraper Chrome extension 2.0.2 Information Disclosure (by DRXYJ-01)

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion