CVE-2026-125361

Tencent BrowserSkill versions through 0.4.2 are affected by a missing authentication vulnerability. The root cause is that the remoteSocket() function connects to a loopback WebSocket without performing credential or peer verification . This allows a local attacker to impersonate the bsk daemon b...