Skip to main content

Tencent BrowserSkill CVE-2026-94111

| EUVDEUVD-2026-83733 MEDIUM
Origin Validation Error (CWE-346)
2026-09-20 disclosure@vulncheck.com GHSA-x6f2-qp26-2xrh
6.9
CVSS 4.0 · Vendor: vulncheck
Share

Severity by source

Vendor (vulncheck) PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
6.6 MEDIUM

Local daemon (AV:L) reachable only after a malicious extension is registered (PR:L); primary impact is manipulating agent-facing content (I:H) with minor disclosure (C:L) and disruption (A:L).

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (vulncheck).

CVSS VectorVendor: vulncheck

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

4
Metadata Corrected
Sep 20, 2026 - 12:40 vuln.today
tag: Rust added
Metadata Corrected
Sep 20, 2026 - 12:40 vuln.today
tag: Google replaced by Tencent
Analysis Generated
Sep 20, 2026 - 12:31 vuln.today
CVE Published
Sep 20, 2026 - 12:17 cve.org
MEDIUM 6.9

DescriptionCVE.org

Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin validation that accepts any chrome-extension origin with 32 characters in range a-p. Attackers can register a malicious extension as a browser client to intercept and manipulate page content, DOM, and screenshots returned to the AI agent.

AnalysisAI

Authentication bypass in the Tencent BrowserSkill local WebSocket daemon (bsk-cli, through v0.3.0) allows any installed browser extension that presents a syntactically valid 32-character Chrome extension ID to register as a client and intercept or manipulate the page content, DOM, and screenshots returned to the AI agent. The root cause is a missing origin allowlist (CWE-346) rather than a memory-safety bug, so exploitation is limited to hosts where a hostile extension can be loaded into the browser and the daemon is running - reflected in the assessed CVSS:3.1 vector AV:L/AC:L/PR:L/UI:N with high integrity impact (I:H) and low confidentiality/availability impact, and in the supplied CVSS 4.0 score of 6.9. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden

Vulnerability AssessmentAI

Exploitation Requires a malicious browser extension to be installed and registered on the victim's browser, and the Tencent BrowserSkill local WebSocket daemon (bsk-cli, through v0.3.0) must be running on the host. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment This is a moderate, locally-scoped integrity risk rather than a widespread emergency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation No vendor-released patch was identified at time of analysis; the practical fix is to upgrade Tencent BrowserSkill/bsk-cli to a release that replaces the shape-only origin check with an exact allowlist of trusted extension IDs, and to verify that change against the referenced source file before relying on it. … Detailed patch versions, workarounds, and compensating controls in full report.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Rust

View all
CVE-2024-3566 CRITICAL POC
9.8 Apr 10

Command injection via Windows CreateProcess argument parsing affects multiple language runtimes and tooling (Node.js, PH

CVE-2021-31162 CRITICAL POC
9.8 Apr 14

In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the ele

CVE-2021-28879 CRITICAL POC
9.8 Apr 11

In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer ove

CVE-2021-29922 CRITICAL POC
9.1 Aug 07

library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginni

CVE-2019-12083 HIGH POC
8.1 May 13

The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, c

CVE-2021-28878 HIGH POC
7.5 Apr 11

In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once fo

CVE-2021-28875 HIGH POC
7.5 Apr 11

In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe c

CVE-2019-16760 HIGH POC
7.5 Sep 30

Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the `package` configuration

CVE-2024-24576 CRITICAL POC
10.0 Apr 09

Rust is a programming language. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no auth

CVE-2018-1000810 CRITICAL
9.8 Oct 08

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contai

CVE-2021-28876 MEDIUM POC
5.3 Apr 11

In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. Rated medium severity (C

CVE-2019-1010299 MEDIUM POC
5.3 Jul 15

The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. Rated med

Share

CVE-2026-94111 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy