TI-2026-62550 CVE-2026-92811 · GHSA-w2m9-jxm7-c4jp
browserless 1.44.0 through 2.56.7 File Protocol Restriction Bypass
Priority MEDIUM 64
browserless versions 1.44.0 through 2.56.7 fail to enforce file protocol restrictions in Playwright websocket endpoints, allowing authenticated token holders to read arbitrary files.