{"id":"EUVD-2026-34031","enisaUuid":"dfee24d6-dd46-3dee-9a33-438c9cf5bfd1","description":"BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the _default HTTP handler in lib/server.js that allows unauthenticated network-adjacent attackers to read arbitrary files. Attackers can exploit the unauthenticated HTTP server bound on all interfaces to traverse outside the project root and access sensitive files.","datePublished":"Jun 2, 2026, 8:34:54 PM","dateUpdated":"Nov 8, 2026, 2:04:51 PM","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/browserstack/browserstack-runner/security/advisories/GHSA-8rpw-6cqh-2v9h\nhttps://www.vulncheck.com/advisories/browserstack-runner-path-traversal-via-default-http-handler\n","aliases":"CVE-2026-49144\nGHSA-8rpw-6cqh-2v9h\n","assigner":"VulnCheck","epss":0.42,"enisaIdProduct":[{"id":"f106b22d-f85f-386e-992c-9dd96153f02c","product":{"name":"browserstack-runner","vendor":{"name":"browserstack"}},"product_version":"0 ≤0.9.5"}],"enisaIdVendor":[{"id":"baa4545b-d021-3356-9f3b-1da180de58bb","vendor":{"name":"browserstack"}}],"enisaIdVulnerability":[{"id":"8c5ea7a3-362b-3748-920b-81670673aa73","vulnerability":{"id":"GHSA-8rpw-6cqh-2v9h","description":"browserstack-runner has an unauthenticated arbitrary file read via path traversal in HTTP server","datePublished":"Jun 3, 2026, 9:38:40 PM","dateUpdated":"Jun 3, 2026, 9:38:40 PM","baseScore":0.0,"references":"https://github.com/browserstack/browserstack-runner/security/advisories/GHSA-8rpw-6cqh-2v9h\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-49144\nhttps://github.com/browserstack/browserstack-runner\nhttps://www.vulncheck.com/advisories/browserstack-runner-path-traversal-via-default-http-handler\n","enisa_id":"EUVD-2026-34031\n","aliases":"CVE-2026-49144\nGHSA-8rpw-6cqh-2v9h\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 1:58:34 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"d0738f98-5711-3ac5-8e2f-32d7c59b52de","vulnerability":{"id":"CVE-2026-49144","description":"BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the _default HTTP handler in lib/server.js that allows unauthenticated network-adjacent attackers to read arbitrary files. Attackers can exploit the unauthenticated HTTP server bound on all interfaces to traverse outside the project root and access sensitive files.","datePublished":"Jun 2, 2026, 8:34:54 PM","dateUpdated":"Nov 8, 2026, 2:04:51 PM","status":"PUBLISHED","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/browserstack/browserstack-runner/security/advisories/GHSA-8rpw-6cqh-2v9h\nhttps://www.vulncheck.com/advisories/browserstack-runner-path-traversal-via-default-http-handler\n","enisa_id":"EUVD-2026-34031\n","assigner":"VulnCheck","epss":0.42,"dataProcessed":"Nov 9, 2026, 2:00:23 PM","vulnerabilityProduct":[{"id":"ce73dcfe-18ee-376d-a702-32037df0e385","product":{"name":"browserstack-runner","vendor":{"name":"browserstack"}},"product_version":"0 ≤0.9.5"}],"vulnerabilityVendor":[{"id":"8da86b67-cfc7-3c99-b4a9-ab14a360b3b3","vendor":{"name":"browserstack"}}]}}],"enisaIdAdvisory":[]}