mcp-chrome-bridge vulnerabilities

CVEs whose affected-version data names the mcp-chrome-bridge package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-102878High· 8.1PoC

today

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local se…

▾ Midnighthangwin · mcp-chrome-bridgevia NVD