{"id":"CVE-2026-106484","kind":"vulnerability","aliases":["CVE-2026-106484"],"related":[],"title":"chrome-devtools-mcp: policy flaw lets local attacker read and write files","description":"Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Medium)","summary":"The chrome-devtools-mcp server bundled with Google Chrome on Linux fails to enforce its policy when handling a malicious file. A local attacker can use it to perform arbitrary reads and writes.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","chrome-devtools-mcp","claude-code","linux","local-dev","mcp"],"not_affected_if":["mcp-not-installed","not-linux","version-1.5.0-or-later"],"how_to_check":"- Check the installed chrome-devtools-mcp version, for example with `npx chrome-devtools-mcp --version` or by reviewing the package.json of the project that depends on it\n- unknown for other checks, as the sources do not say how to detect it in a deployment","fix":"- Upgrade chrome-devtools-mcp to `1.5.0` or later\n- unknown for Google Chrome versions, as the sources do not name a fixed Chrome build","status":"open","published_at":"2026-10-28T19:17:21+00:00","first_seen_at":"2026-10-28T19:34:54+00:00","triaged_at":"2026-10-28T19:36:17+00:00","updated_at":"2026-10-28T19:36:17+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-28T19:36:17Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade chrome-devtools-mcp to `1.5.0` or later\n- unknown for Google Chrome versions, as the sources do not name a fixed Chrome build","reach":"local","title":"chrome-devtools-mcp: policy flaw lets local attacker read and write files","impact":"high","summary":"The chrome-devtools-mcp server bundled with Google Chrome on Linux fails to enforce its policy when handling a malicious file. A local attacker can use it to perform arbitrary reads and writes.","category":"ai-tooling","nicknames":[],"who_cares":["chrome-devtools-mcp","linux","mcp","claude-code","local-dev"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Local attacker reads and writes arbitrary files on the machine","analyst_note":"Confirm which products bundle chrome-devtools-mcp and the exact Chrome release that fixed it, using the NVD entry and Chromium security advisory.","how_to_check":"- Check the installed chrome-devtools-mcp version, for example with `npx chrome-devtools-mcp --version` or by reviewing the package.json of the project that depends on it\n- unknown for other checks, as the sources do not say how to detect it in a deployment","needs_analyst":true,"not_affected_if":["not-linux","mcp-not-installed","version-1.5.0-or-later"],"who_is_affected":"Teams running chrome-devtools-mcp on Linux machines where a local user or process can supply files to it, prior to version 1.5.0. Systems without this MCP server installed, or on other operating systems, are not indicated as affected by the sources.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000634,"input_tokens":3305,"output_tokens":608,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-106484':16A,19A '-2026':15A,18A '1.5.0':84C 'ai':21B 'ai-tool':20B 'allow':85C 'arbitrari':65B,91C 'attack':9A,59B,88C 'bundl':41B 'chrome':2A,24B,37B,44B,74C,79C 'chrome-devtools-mcp':1A,23B,36B,73C 'chromium':97C 'claud':28B 'claude-cod':27B 'code':29B 'cve':14A,17A 'dev':33B 'devtool':3A,25B,38B,75C 'enforc':49B,71C 'fail':47B 'file':13A,56B,96C 'flaw':6A 'googl':43B,78C 'handl':53B 'insuffici':69C 'let':7A 'linux':30B,46B,81C 'local':8A,32B,58B,87C 'local-dev':31B 'malici':55B,95C 'mcp':4A,26B,34B,39B,76C 'medium':100C 'perform':64B,90C 'polici':5A,51B,70C 'prior':82C 'read':10A,66B 'read/write':92C 'secur':98C 'server':40B 'sever':99C 'tool':22B 'use':61B 'via':93C 'write':12A,68B","nicknames":[],"mitigations":[],"who_affected":"Teams running chrome-devtools-mcp on Linux machines where a local user or process can supply files to it, prior to version 1.5.0. Systems without this MCP server installed, or on other operating systems, are not indicated as affected by the sources.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T19:17:21+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-106484","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106484","severity":null,"published_at":"2026-10-28T19:17:21+00:00","modified_at":"2026-10-28T19:17:21+00:00","first_seen_at":"2026-10-28T19:34:54+00:00","fetched_at":"2026-10-28T19:34:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}