{"uuid": "7ca6fc28-47f6-42fc-8a89-4d4721f14f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53766", "type": "seen", "source": "https://gist.github.com/alon710/259d2014ae004d0972fa015a9b341f1e", "content": "# CVE-2026-53766: CVE-2026-53766: Workspace Boundary Bypass in chrome-devtools-mcp via Symbolic Link Resolution Failure\n\n> **CVSS Score:** 6.1\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-53766\n\n## Summary\nA workspace boundary bypass vulnerability exists in the Chrome DevTools for Agents (chrome-devtools-mcp) Model Context Protocol (MCP) server from version 0.24.0 up to 1.1.0. The vulnerability allows an agent or malicious workspace containing symbolic links to read or modify arbitrary files outside the configured project workspace root directory. This occurs because the path validation function resolves paths lexically rather than physically.\n\n## TL;DR\nThe chrome-devtools-mcp server failed to resolve symbolic links physically during path validation, allowing directory traversal and unauthorized read/write access outside the workspace via local symlinks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22 / CWE-59\n- **Attack Vector**: Local\n- **CVSS Score**: 6.1\n- **EPSS Score**: 0.00107\n- **Impact**: High (Integrity)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- chrome-devtools-mcp\n- **chrome-devtools-mcp**: >=0.24.0 <1.1.0 (Fixed in: `1.1.0`)\n\n## Mitigation\n\n- Upgrade chrome-devtools-mcp to version 1.1.0 or higher.\n- Apply sandboxing (Docker, gVisor, or AppArmor) to limit the file access footprint of the Node process.\n- Configure directory permissions to prevent the creation of unauthorized symlinks inside workspace folders.\n\n**Remediation Steps:**\n1. 1. Identify current version of chrome-devtools-mcp in use using 'npm list chrome-devtools-mcp'.\n2. 2. Update package.json to reference version '^1.1.0' or higher.\n3. 3. Run 'npm install' or 'yarn install' to pull the updated version.\n4. 4. Restart any active instances of the MCP server.\n\n## References\n\n- [GHSA-8qf9-62x2-82pp: Workspace-boundary bypass in chrome-devtools-mcp](https://github.com/ChromeDevTools/chrome-devtools-mcp/security/advisories/GHSA-8qf9-62x2-82pp)\n- [Fix Commit](https://github.com/ChromeDevTools/chrome-devtools-mcp/commit/176eb695137d9c46a61e2d4d5571880c5145cf46)\n- [Release Tag v1.1.0](https://github.com/ChromeDevTools/chrome-devtools-mcp/releases/tag/chrome-devtools-mcp-v1.1.0)\n- [Pull Request 2127](https://github.com/ChromeDevTools/chrome-devtools-mcp/pull/2127)\n- [NVD CVE Portal](https://nvd.nist.gov/vuln/detail/CVE-2026-53766)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-53766) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T02:33:46.513030Z"}