storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token

A flaw was found in Storybook, which may lead to arbitrary code execution. The development server exposes its WebSocket authentication token to clients loading its web pages across a local area network LAN. An attacker on the local network can capture this token and abuse file-writing functionali...

storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token

A flaw was found in Storybook, which may lead to arbitrary code execution. The development server exposes its WebSocket authentication token to clients loading its web pages across a local area network LAN. An attacker on the local network can capture this token and abuse file-writing functionali...

storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token

A flaw was found in Storybook, which may lead to arbitrary code execution. The development server exposes its WebSocket authentication token to clients loading its web pages across a local area network LAN. An attacker on the local network can capture this token and abuse file-writing functionali...

SUSE CVE-2026-114126

Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, the Storybook development server can expose its WebSocket authentication token to clients able to load its HTML pages over a local network. ...

EUVD-2026-107408

Storybook dev server vulnerable to code injection from the local network...

CVE-2026-114126

Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, the Storybook development server can expose its WebSocket authentication token to clients able to load its HTML pages over a local network. ...

CVE-2026-114126

Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, the Storybook development server can expose its WebSocket authentication token to clients able to load its HTML pages over a local network. ...

Linux Distros Unpatched Vulnerability : CVE-2026-114126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, the...

PT-2026-120729

Name of the Vulnerable Software and Affected Versions Storybook versions 8.0.0 through 8.6.18 Storybook versions 9.x through 9.1.20 Storybook versions 10.x through 10.6.1 Storybook versions 11.0.0-alpha.0 through 11.0.0-alpha.5 Description The development server can expose its WebSocket...

Red Hat: CVE-2026-114126: storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token

Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, the Storybook development server can expose its WebSocket authentication token to clients able to load its HTML pages over a local network. ...