CVE-2026-92811 PUBLISHED

browserless versions 1.44.0 through 2.56.7 fail to enforce file protocol restrictions in Playwright websocket endpoints, allowing authenticated token holders to read arbitrary files. Attackers can navigate Playwright-driven browsers to file scheme URLs and access files accessible to the container process despite the ALLOW_FILE_PROTOCOL setting defaulting to false.

• George Chen finder

• Researcher write-up
• the CDP class enforces getAllowFileProtocol
• the Playwright class never consults the setting
• https://github.com/browserless/browserless
• VulnCheck Advisory: browserless 1.44.0 through 2.56.7 File Protocol Restriction Bypass

• Exposure of Sensitive Information to an Unauthorized Actor CWE