Vitest: Browser Mode provider commands bypass the file-access permission gate
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure, Security bypass
- Confidentiality · integrity · availability
- High · High · Low
- Fix status
- Partial Red Hat: 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-552 and CWE-862.
Summary
Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-supplied file paths without enforcing the allowWrite permission gate or confining paths to the project root. A client that can reach the Browser Mode API can read arbitrary local files, create or overwrite image and trace files, or delete files accessible to the Vitest process even when allowWrite is false. This issue is fixed in versions 3.2.7, 4.1.10, and 5.0.0-beta.6.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| vitest-dev | vitest | before 3.2.7; 4.0.0 to before 4.1.10; 5.0.0-beta.1 to before 5.0.0-beta.6 | 3.2.7, 4.1.10, 5.0.0-beta.6 | Patch available | CNA |
| — | @vitest/browser (npm) | 4.0.0 to before 4.1.10 | 4.1.10 | Patch available | GHSA-p63j-vcc4-9vmv |
| — | @vitest/browser (npm) | before 3.2.7 | 3.2.7 | Patch available | GHSA-p63j-vcc4-9vmv |
| — | @vitest/browser (npm) | 5.0.0-beta.1 to before 5.0.0-beta.6 | 5.0.0-beta.6 | Patch available | GHSA-p63j-vcc4-9vmv |
- vitest Vendorvitest-dev Affected before 3.2.7; 4.0.0 to before 4.1.10; 5.0.0-beta.1 to before 5.0.0-beta.6 Fixed in 3.2.7, 4.1.10, 5.0.0-beta.6 Patch available CNA
- @vitest/browser (npm) Vendor— Affected 4.0.0 to before 4.1.10 Fixed in 4.1.10 Patch available GHSA-p63j-vcc4-9vmv
- @vitest/browser (npm) Vendor— Affected before 3.2.7 Fixed in 3.2.7 Patch available GHSA-p63j-vcc4-9vmv
- @vitest/browser (npm) Vendor— Affected 5.0.0-beta.1 to before 5.0.0-beta.6 Fixed in 5.0.0-beta.6 Patch available GHSA-p63j-vcc4-9vmv
CPE names Threatist (inferred) · 1
Inferred from how NVD named this product before; not given by a source.
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vitest.dev:vitest:*:*:*:*:*:*:*:* | — | — | vitest-dev |
- cpe:2.3:a:vitest.dev:vitest:*:*:*:*:*:*:*:* Versions — — ·vitest-dev
Remediation
- Fix · CNA vitest (vitest-dev) Fixed in 3.2.7, 4.1.10, 5.0.0-beta.6
- Fix · GHSA-p63j-vcc4-9vmv @vitest/browser (npm) Fixed in 4.1.10 Advisory →
- Fix · GHSA-p63j-vcc4-9vmv @vitest/browser (npm) Fixed in 3.2.7 Advisory →
- Fix · GHSA-p63j-vcc4-9vmv @vitest/browser (npm) Fixed in 5.0.0-beta.6 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Critical. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Build of Podman Desktop | Affected | No fix yet |
Not affected: 7 products
- Red Hat AMQ Broker 7
- Red Hat Ansible Automation Platform 2
- Red Hat Build of Keycloak
- Red Hat Hardened Images
- Red Hat JBoss Enterprise Application Platform 8
- Red Hat JBoss Enterprise Application Platform Expansion Pack
- Red Hat Trusted Artifact Signer
Timeline
- 2026-10-02 Threatist record created from CVE-2026-73653
- 2026-10-03 Alias added: GHSA-p63j-vcc4-9vmv
References
Other 11
- https://github.com/vitest-dev/vitest/security/advisories/GHSA-p63j-vcc4-9vmv
- https://github.com/vitest-dev/vitest/pull/10674
- https://github.com/vitest-dev/vitest/pull/10679
- https://github.com/vitest-dev/vitest/pull/10680
- https://github.com/vitest-dev/vitest/commit/33f96a145ef09ca6a43b4e555eb273e64a87be23
- https://github.com/vitest-dev/vitest/commit/5c18dd267ff7f47f24cab2f615a16b37d90feb7f
- https://github.com/vitest-dev/vitest/commit/b795e36b34969bec50b47a9f29d26f799a6a04fb
- https://github.com/vitest-dev/vitest/releases/tag/v3.2.7
- https://github.com/vitest-dev/vitest/releases/tag/v4.1.10
- https://github.com/vitest-dev/vitest/releases/tag/v5.0.0-beta.6
- https://github.com/vitest-dev/vitest
More vitest-dev vulnerabilities
- TI-2026-38677 Vitest: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE CVSS 3.1CRITICAL 9.8
- TI-2026-34992 Vitest: Arbitrary file can be read and executed when Vitest UI server is listening CVSS 3.1CRITICAL 9.8
- TI-2026-34991 Vitest browser mode serves unsanitized otelCarrier query parameter as inline script CVSS 3.1CRITICAL 9.6
- TI-2025-18644 Remote Code Execution when accessing a malicious website while Vitest API server is listening CVSS 3.1CRITICAL 9.7
- TI-2025-18643 Browser mode serves arbitrary files in vitest CVSS 3.1HIGH 7.5
- TI-2026-76917 Backslash traversal in Vitest mocker exposes files on Windows CVSS 3.1MEDIUM 5.9
Sources
- CVE-2026-73653 · CVE Program
- CVE-2026-73653 · NVD
- FIRST EPSS
- GHSA-p63j-vcc4-9vmv · GitHub Advisory Database · CC BY 4.0
- CVE-2026-73653 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences