GHSA-3pvj-jv98-qhjq
Medium · 6.1CVSS
6.1
EPSS
—
Published
Jun 17, 2026
CISA due date
—
The record
Chrome DevTools for agents: daemon.pid write follows symlinks in /tmp fallback runtime directory
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | chrome-devtools-mcp | 0.20.0 | 1.1.0 |
Related vulnerabilities
- CVE-2026-53765 Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agent control and… Same vulnerability
- CVE-2026-113724 virtualenv is a tool for creating isolated virtual python environments. CWE-59
- CVE-2026-113716 virtualenv is a tool for creating isolated virtual python environments. CWE-59
- CVE-2026-55480 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… CWE-59
- CVE-2026-90954 A flaw was found in BusyBox's dpkg-deb archive extraction. CWE-59
- CVE-2026-109274 ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race… CWE-59
- CVE-2026-105081 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for… CWE-59
- CVE-2026-108119 A flaw was found in busybox. CWE-59