Browserless
Monthly
Authenticated token holders can drive the Playwright websocket endpoints of browserless to file:// URLs and read arbitrary files available to the container process, affecting versions 1.44.0 through 2.56.7. The setting intended to prevent this, ALLOW_FILE_PROTOCOL, already defaults to false, but it is simply not enforced on the Playwright path, so exploitation requires no non-default configuration and no user interaction - only a valid token (CVSS vector PR:L) and network reachability to the websocket endpoint. Publicly available exploit code exists, and while the disclosed CVSS of 7.1 reflects high confidentiality impact, practical exposure is bounded to files readable by the container process, so container isolation and minimal secret mounts materially limit the blast radius.
Authenticated token holders can drive the Playwright websocket endpoints of browserless to file:// URLs and read arbitrary files available to the container process, affecting versions 1.44.0 through 2.56.7. The setting intended to prevent this, ALLOW_FILE_PROTOCOL, already defaults to false, but it is simply not enforced on the Playwright path, so exploitation requires no non-default configuration and no user interaction - only a valid token (CVSS vector PR:L) and network reachability to the websocket endpoint. Publicly available exploit code exists, and while the disclosed CVSS of 7.1 reflects high confidentiality impact, practical exposure is bounded to files readable by the container process, so container isolation and minimal secret mounts materially limit the blast radius.