CVE-2026-26329

OpenClaw contains a path traversal in the browser tool upload action that allows an authenticated user to read arbitrary files on the Gateway host by supplying absolute or traversal paths. This existed prior to version 2026.2.14; the server passed user-supplied paths to Playwright's setInputFiles...

CVE-2026-26329 OpenClaw has a path traversal in browser upload allows local file read

OpenClaw is a personal AI assistant. Prior to version 2026.2.14, authenticated attackers can read arbitrary files from the Gateway host by supplying absolute paths or path traversal sequences to the browser tool's upload action. The server passed these paths to Playwright's setInputFiles APIs...

Directory Traversal

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Directory Traversal via the waitForDownloadViaPlaywright and downloadViaPlaywright functions. An attacker can write files outside the intended temporary downloads directory by supplying a...

CLEANSTART-2026-MB75553 vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record

Multiple security vulnerabilities affect the playwright-python package. A vulnerability was found in Avahi, where a reachable assertion exists in avahidnspacketappendrecord. See references for individual vulnerability details...

CVE-2025-9611

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended...

@ejazullah/playwright-mcp-server (>=1.0.0, <=1.88.0), @grebyn/toolentry-mcp-server (>=1.0.0, <=1.7.1) +24 more potentially affected by CVE-2025-9611 via @playwright/mcp (>=0.0.5, <=0.0.39)

@playwright/mcp NPM version =0.0.5, =1.0.0, =1.0.0, =1.0.8, =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.1.0, =1.3.1 and more Source cves: CVE-2025-9611 Source advisory: OSV:GHSA-6FG3-HVW7-2FWQ...

Microsoft Playwright MCP Server vulnerable to DNS Rebinding Attack; Allows Attackers Access to All Server Tools

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended...

@ejazullah/playwright-mcp-server (>=1.0.0, <=1.88.0), @grebyn/toolentry-mcp-server (>=1.0.0, <=1.7.1) +24 more potentially affected by CVE-2025-9611 via @playwright/mcp (>=0.0.5, <=0.0.39)

@playwright/mcp NPM version =0.0.5, =1.0.0, =1.0.0, =1.0.8, =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.1.0, =1.3.1 and more Source cves: CVE-2025-9611 Source advisory: GHSA-6FG3-HVW7-2FWQ...

GHSA-6FG3-HVW7-2FWQ Microsoft Playwright MCP Server vulnerable to DNS Rebinding Attack; Allows Attackers Access to All Server Tools

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended...

CVE-2025-9611

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended...

Exposed Dangerous Method or Function

Overview playwright is an A high-level API to automate web browsers Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via missing validation of the Origin header on incoming connections. An attacker can gain unauthorized access to locally running endpoints b...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @99xio/mcp-playwright (0.1.2) +554 more potentially affected by CVE-2025-9611 via playwright (>=1.0.2, <=1.56.0-beta-1760659234000)

playwright NPM version =1.0.2, =0.0.1, =0.9.31, =0.1.8, =0.0.18-patch.0, =0.0.33, =0.0.1, =0.1.1, =0.1.1, =0.2.0, =0.0.4, =0.0.10-a, =0.0.1, =1.11.0, =1.13.3 and more Source cves: CVE-2025-9611 Source advisory: SNYK:JS-PLAYWRIGHT-14888269...

Exposed Dangerous Method or Function

Overview org.webjars.npm:playwright is an A high-level API to automate web browsers Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via missing validation of the Origin header on incoming connections. An attacker can gain unauthorized access to locally...

EUVD-2026-1179

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended...

CVE-2025-9611 Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended...

@ejazullah/playwright-mcp-server (>=1.0.0, <=1.88.0), @grebyn/toolentry-mcp-server (>=1.0.0, <=1.7.1) +24 more potentially affected by CVE-2025-9611 via @playwright/mcp (>=0.0.5, <=0.0.39)

@playwright/mcp NPM version =0.0.5, =1.0.0, =1.0.0, =1.0.8, =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.1.0, =1.3.1 and more Source cves: CVE-2025-9611 Source advisory: MEND:CVE-2025-9611...

CVE-2025-9611

Microsoft Playwright MCP Server prior to version 0.0.40 is vulnerable due to missing Origin header validation, enabling DNS rebinding attacks that can trigger unauthorized requests to locally running MCP tool endpoints. Affected software: MCP Server versions

CVE-2025-9611 Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended...

CVE-2025-9611 Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended...

CVE-2025-9611: Exposed Dangerous Method or Function

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended...