CVE-2026-92811

browserless versions 1.44.0 through 2.56.7 fail to enforce file protocol restrictions in Playwright websocket endpoints, allowing authenticated token holders to read arbitrary files. Attackers can navigate Playwright-driven browsers to file scheme URLs and access files accessible to the container...

PT-2026-94083

Name of the Vulnerable Software and Affected Versions browserless versions 1.44.0 through 2.56.7 Description Authenticated token holders can read arbitrary files accessible to the container process because the software fails to enforce file protocol restrictions in Playwright websocket endpoints...