Bug 2570389 (CVE-2026-125361)
| Summary: | CVE-2026-125361 BrowserSkill: BrowserSkill: Arbitrary code execution via local daemon impersonation | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability-draft | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in BrowserSkill. A local attacker can achieve arbitrary code execution within active browser sessions by impersonating the application's local background daemon. Because the extension connects to local communication sockets without verifying credentials or peer identity, an attacker can bind the listening port before the daemon starts or after it stops. This issue allows the attacker to access administrative browser controls and execute arbitrary JavaScript across logged-in browser tabs via the Chrome DevTools Protocol (CDP).
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-11-10 19:55:18 UTC
|