MEDIUM 6.1 GitHub
CVE-2026-53766
chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots
### Summary
I originally reported this through Google Bug Hunters. The Google Bug Hunters team said this is in OSS VRP scope but not reward-eligible due to the project tier, and asked me to file an issue or PR directly with this repository. I am reporting it privately here first because it is an unfixed security issue.
`McpContext.validatePath()` enforces workspace `roots` by checking whether `path.resolve(filePath)` textually falls under one of the configured root paths. `path.resolve()` does
Affected Products
- npm/chrome-devtools-mcp >= 0.24.0, <= 1.0.1
References
- https://github.com/advisories/GHSA-8qf9-62x2-82pp
- https://github.com/ChromeDevTools/chrome-devtools-mcp/security/advisories/GHSA-8qf9-62x2-8
- https://nvd.nist.gov/vuln/detail/CVE-2026-53766
- https://github.com/ChromeDevTools/chrome-devtools-mcp/pull/2127
This medium severity vulnerability with a CVSS score of 6.1 was published on 2026-08-17 via GitHub. Affected: npm/chrome-devtools-mcp >= 0.24.0, <= 1.0.1.
vulnfeed aggregates 11052 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.