CVE-2026-94111

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-94111

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-94111.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-94111

Published

2026-09-20T11:56:07Z

Modified

2026-09-24T03:30:36Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket Daemon

Details

Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin validation that accepts any chrome-extension origin with 32 characters in range a-p. Attackers can register a malicious extension as a browser client to intercept and manipulate page content, DOM, and screenshots returned to the AI agent.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-346"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94111.json"
}

References

Affected packages

Git / github.com/tencent/browserskill

Affected ranges

Type

GIT

Repo

https://github.com/tencent/browserskill

Events

Introduced

Fixed

75e2c64abaf4b7cc75682d94b0c1fd5db0cbd5e5

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "0.3.0"
        },
        {
            "fixed":  "0.3.0"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Affected versions

cli-v0.*

cli-v0.1.10

cli-v0.1.11

cli-v0.1.5

cli-v0.1.6

cli-v0.1.7

cli-v0.1.8

cli-v0.1.9

cli-v0.2.0

cli-v0.2.1

dsh-plugin-v0.*

dsh-plugin-v0.1.1

dsh-plugin-v0.1.2

dsh-plugin-v0.2.0

dsh-plugin-v0.2.1

ext-v0.*

ext-v0.1.2

ext-v0.1.3

ext-v0.1.4

ext-v0.1.5

ext-v0.1.6

ext-v0.1.7

ext-v0.2.0

ext-v0.2.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-94111.json"