Tencent BrowserSkill vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Tencent BrowserSkill: 1 record(s), with affected versions and fixes.

CVE-2026-94111 Medium · 6.6 CWE-346 Sep 20, 2026

Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket Daemon

Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin validation that accepts any chrome-extension origin with 32 characters in range a-p. Attackers can register a malicious extension as a browser client to intercept and manipulate page content, DOM, and screenshots returned to the AI agent.