ChromeDevTools
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| chrome-devtools-mcp | 2 | – | Jun 24, 2026 |
Exploited and recent CVEs
- CVE-2026-53765 chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory 0.1%
- CVE-2026-53766 chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots 0.1%