[ CVE-2026-106484 · Published 28 Oct 2026 ]
Vulnerability in Google chrome-devtools-mcp
CVSS 4.4
EPSS <1%No fix listed yet
[ Description ]Official description
Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Medium)
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.