3 matches found
EUVD-2026-120524
Tencent BrowserSkill through 0.4.2 contains a missing authentication vulnerability that allows local attackers to impersonate the bsk daemon because remoteSocket connects to the loopback WebSocket without credentials or peer verification. Attackers who bind the daemon port before it starts or aft...
CVE-2026-125361 Tencent BrowserSkill through 0.4.2 Missing Authentication in Local WebSocket Transport
Tencent BrowserSkill through 0.4.2 contains a missing authentication vulnerability that allows local attackers to impersonate the bsk daemon because remoteSocket connects to the loopback WebSocket without credentials or peer verification. Attackers who bind the daemon port before it starts or aft...
PT-2026-141184
Tencent BrowserSkill through 0.4.2 contains a missing authentication vulnerability that allows local attackers to impersonate the bsk daemon because remoteSocket connects to the loopback WebSocket without credentials or peer verification. Attackers who bind the daemon port before it starts or aft...