What is GHSA-2mw5-2f2c-v2g3?

GHSA-2mw5-2f2c-v2g3 is a security advisory published by GitHub Security Advisories with Medium severity. Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0...

Which CVE IDs does GHSA-2mw5-2f2c-v2g3 cover?

GHSA-2mw5-2f2c-v2g3 covers the following CVE IDs: CVE-2026-106484. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2mw5-2f2c-v2g3?

GHSA-2mw5-2f2c-v2g3 has a CVSS v3 base score of 4.4, published by GitHub Security Advisories.

GHSA-2mw5-2f2c-v2g3MediumCVSS 4.4

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

October 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-106484 →

📋 Description

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Medium)

🔗 References (3)

https://github.com/ChromeDevTools/chrome-devtools-mcp/security/advisories/GHSA-5hw5-4q87-m6x9
https://nvd.nist.gov/vuln/detail/CVE-2026-106484
https://github.com/advisories/GHSA-2mw5-2f2c-v2g3