{"id":"CVE-2026-73653","aliases":["CLSA-2026-1790162728","CLSA-2026-1792160955","CLSA-2026-1792160965","CLSA-2026-1792161474","CLSA-2026-1792161476","CLSA-2026-1792161576","CLSA-2026-1792161578","CLSA-2026-1792161609","CLSA-2026-1792161648","CLSA-2026-1792161651","CLSA-2026-1792161664","CLSA-2026-1792161721","CLSA-2026-1792161723","CLSA-2026-1792161767","CLSA-2026-1792161770","CLSA-2026-1792161833","CLSA-2026-1792161877","CLSA-2026-1792161879","CLSA-2026-1792161944","CLSA-2026-1792161976","CLSA-2026-1792161978","CLSA-2026-1792162035","CLSA-2026-1792162038","CLSA-2026-1792162062","CLSA-2026-1792450983","CLSA-2026-1793093026","EUVD-2026-58197","GHSA-p63j-vcc4-9vmv"],"status":"published","title":"Vitest: Browser Mode provider commands bypass the file-access permission gate","description":"Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-supplied file paths without enforcing the allowWrite permission gate or confining paths to the project root. A client that can reach the Browser Mode API can read arbitrary local files, create or overwrite image and trace files, or delete files accessible to the Vitest process even when allowWrite is false. This issue is fixed in versions 3.2.7, 4.1.10, and 5.0.0-beta.6.","severity":{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0079,"percentile":0.56534,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22","CWE-552","CWE-862"],"published":"2026-07-21T19:36:12Z","modified":"2026-11-02T19:58:36Z","fixes":[{"ecosystem":"npm","package":"@vitest/browser","fixed_in":["4.1.10","3.2.7","5.0.0-beta.6"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"vitest","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/web-worker","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/snapshot","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/browser","fixed_in":["4.0.18-tuxcare.3","3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/coverage-istanbul","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/coverage-v8","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/expect","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/mocker","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/pretty-format","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/spy","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/ui","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/utils","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/runner","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"@vitest/ws-client","fixed_in":["3.2.4-tuxcare.3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"@vitest/browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.1.10"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@vitest/browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@vitest/browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0-beta.1"},{"fixed":"5.0.0-beta.6"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"vitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/pretty-format","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.18-tuxcare.0"},{"fixed":"4.0.18-tuxcare.3"}]}],"versions":["4.0.18","4.0.18-tuxcare.1","4.0.18-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/web-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/snapshot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.18-tuxcare.0"},{"fixed":"4.0.18-tuxcare.3"}]}],"versions":["4.0.18","4.0.18-tuxcare.1","4.0.18-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/snapshot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.18-tuxcare.0"},{"fixed":"4.0.18-tuxcare.3"}]}],"versions":["4.0.18","4.0.18-tuxcare.1","4.0.18-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/browser-playwright","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.18-tuxcare.0"},{"fixed":"4.0.18-tuxcare.3"}]}],"versions":["4.0.18","4.0.18-tuxcare.1","4.0.18-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/browser-preview","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.18-tuxcare.0"},{"fixed":"4.0.18-tuxcare.3"}]}],"versions":["4.0.18","4.0.18-tuxcare.1","4.0.18-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/coverage-istanbul","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/coverage-v8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/expect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.18-tuxcare.0"},{"fixed":"4.0.18-tuxcare.3"}]}],"versions":["4.0.18","4.0.18-tuxcare.1","4.0.18-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/expect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/mocker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.18-tuxcare.0"},{"fixed":"4.0.18-tuxcare.3"}]}],"versions":["4.0.18","4.0.18-tuxcare.1","4.0.18-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/mocker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/pretty-format","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/spy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.18-tuxcare.0"},{"fixed":"4.0.18-tuxcare.3"}]}],"versions":["4.0.18","4.0.18-tuxcare.1","4.0.18-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/spy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.18-tuxcare.0"},{"fixed":"4.0.18-tuxcare.3"}]}],"versions":["4.0.18","4.0.18-tuxcare.1","4.0.18-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/runner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.18-tuxcare.0"},{"fixed":"4.0.18-tuxcare.3"}]}],"versions":["4.0.18","4.0.18-tuxcare.1","4.0.18-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/runner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"@vitest/ws-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.4-tuxcare.0"},{"fixed":"3.2.4-tuxcare.3"}]}],"versions":["3.2.4","3.2.4-tuxcare.1","3.2.4-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"vitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.9-tuxcare.0"},{"fixed":"2.1.9-tuxcare.1"}]}],"versions":["2.1.9"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:npm","package":"vitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.5-tuxcare.0"},{"fixed":"2.0.5-tuxcare.1"}]}],"versions":["2.0.5"],"bundled":4},{"source":"osv","ecosystem":"npm","package":"@vitest/browser","ranges":[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.1.10"}]}]},{"source":"osv","ecosystem":"npm","package":"@vitest/browser","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.2.7"}]}]},{"source":"osv","ecosystem":"npm","package":"@vitest/browser","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0-beta.1"},{"fixed":"5.0.0-beta.6"}]}]}],"products":[{"vendor":"vitest-dev","product":"vitest"}],"references":[{"url":"https://github.com/vitest-dev/vitest/security/advisories/GHSA-p63j-vcc4-9vmv","tags":["x_refsource_CONFIRM","advisory","web"]},{"url":"https://github.com/vitest-dev/vitest/pull/10674","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/vitest-dev/vitest/pull/10679","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/vitest-dev/vitest/pull/10680","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/vitest-dev/vitest/commit/33f96a145ef09ca6a43b4e555eb273e64a87be23","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/vitest-dev/vitest/commit/5c18dd267ff7f47f24cab2f615a16b37d90feb7f","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/vitest-dev/vitest/commit/b795e36b34969bec50b47a9f29d26f799a6a04fb","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/vitest-dev/vitest/releases/tag/v3.2.7","tags":["x_refsource_MISC","web"]},{"url":"https://github.com/vitest-dev/vitest/releases/tag/v4.1.10","tags":["x_refsource_MISC","web"]},{"url":"https://github.com/vitest-dev/vitest/releases/tag/v5.0.0-beta.6","tags":["x_refsource_MISC","web"]},{"url":"https://github.com/advisories/GHSA-p63j-vcc4-9vmv"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73653.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73653","tags":["advisory"]},{"url":"https://github.com/vitest-dev/vitest","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-73653","title":"Vitest: Browser Mode provider commands bypass the file-access permission gate","description":"Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-supplied file paths without enforcing the allowWrite permission gate or confining paths to the project root. A client that can reach the Browser Mode API can read arbitrary local files, create or overwrite image and trace files, or delete files accessible to the Vitest process even when allowWrite is false. This issue is fixed in versions 3.2.7, 4.1.10, and 5.0.0-beta.6.","status":"published","published":"2026-08-13T18:19:00.452Z","modified":"2026-08-13T18:42:42.75Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical","assessor":"cna"}],"cwes":["CWE-22","CWE-552","CWE-862"],"updated_at":"2026-11-02T13:43:22.599321Z"}],"euvd":[{"id":"EUVD-2026-58197","description":"Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-supplied file paths without enforcing the allowWrite permission gate or confining paths to the project root. A client that can reach the Browser Mode API can read arbitrary local files, create or overwrite image and trace files, or delete files accessible to the Vitest process even when allowWrite is false. This issue is fixed in versions 3.2.7, 4.1.10, and 5.0.0-beta.6.","status":"published","published":"2026-08-13T18:19:00Z","modified":"2026-08-13T18:42:42Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T18:01:55.61982Z"}],"ghsa":[{"id":"GHSA-p63j-vcc4-9vmv","title":"@vitest/browser: Browser Mode provider commands bypass the file-access permission gate","description":"## Summary\n\nBrowser Mode exposes a set of built-in \"commands\" that run on the Node.js side of the test runner and can touch the local filesystem (taking screenshots, managing Playwright traces, uploading files for `\u003cinput type=\"file\"\u003e`, comparing screenshots).\n\nSeveral of these commands accept a file path from the browser and act on it without checking the `allowWrite` permission gate and without confining the path to the project directory. A client that can reach the Browser Mode API can therefore read, create, overwrite, or delete files anywhere the Vitest process can access, even when `allowWrite` is `false`.\n\nThis matters most when the Browser Mode API is exposed to the network (for example `test.api.host` is set, or the dev server is reachable from another machine or origin). In that configuration `allowWrite` defaults to `false` precisely to block file access, and these commands bypass that protection. On a default localhost-only setup with trusted test code, there is no untrusted party in a position to exploit it. The gap still matters wherever you rely on `allowWrite: false` to contain untrusted test code, because these commands ignore that flag.\n\n## Affected commands and impact\n\n| Command | Operation | Impact |\n|---|---|---|\n| `upload` (Playwright + WebdriverIO) | Read | Arbitrary local file read; contents are loaded into the page and readable by test code. Highest-impact case. |\n| `takeScreenshot` (Playwright + WebdriverIO) | Write | Writes a PNG to an arbitrary path (absolute path used verbatim), creating parent directories. |\n| `screenshotMatcher` | Write | Writes reference/diff PNGs; directory derived from client path allows partial traversal. |\n| `stopChunkTrace` | Write | Writes a Playwright trace `.zip` to a path escapable via `../` in the trace name. |\n| `deleteTracing` | Delete | Deletes arbitrary files by path. |\n| `annotateTraces` | Read (disclosure) | Records a client-controlled attachment path that the reporter copies into the attachments directory, disclosing file contents. |\n\nThe writes do not let an attacker choose the file contents (they produce PNG images or trace archives), so the integrity impact is creating, overwriting, or deleting a file at an arbitrary path rather than writing a chosen payload. The reads (`upload`, `annotateTraces`) are more serious because they expose the full contents of an arbitrary file.\n\nThe fix adds, to every file-touching provider command, an `allowWrite` check for write/delete operations and path confinement to the project root (matching the existing `fs` command pattern), so client-supplied absolute paths and `../` traversal are rejected.","status":"published","published":"2026-07-21T19:36:12Z","modified":"2026-08-13T18:19:12Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical"}],"cwes":["CWE-22","CWE-552","CWE-862"],"updated_at":"2026-11-02T14:41:00.097339Z"}],"nvd":[{"id":"CVE-2026-73653","description":"Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-supplied file paths without enforcing the allowWrite permission gate or confining paths to the project root. A client that can reach the Browser Mode API can read arbitrary local files, create or overwrite image and trace files, or delete files accessible to the Vitest process even when allowWrite is false. This issue is fixed in versions 3.2.7, 4.1.10, and 5.0.0-beta.6.","status":"published","published":"2026-08-13T19:17:38.92Z","modified":"2026-09-09T21:02:22.66Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical","assessor":"secondary"}],"cwes":["CWE-22","CWE-552","CWE-862"],"updated_at":"2026-11-02T14:12:37.557758Z"}],"osv":[{"id":"CVE-2026-73653","title":"Vitest: Browser Mode provider commands bypass the file-access permission gate","description":"Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-supplied file paths without enforcing the allowWrite permission gate or confining paths to the project root. A client that can reach the Browser Mode API can read arbitrary local files, create or overwrite image and trace files, or delete files accessible to the Vitest process even when allowWrite is false. This issue is fixed in versions 3.2.7, 4.1.10, and 5.0.0-beta.6.","status":"published","published":"2026-08-13T18:19:00.452Z","modified":"2026-10-28T02:30:48.112674071Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical"}],"cwes":["CWE-22","CWE-552","CWE-862"],"updated_at":"2026-11-02T15:45:16.365946Z"},{"id":"GHSA-p63j-vcc4-9vmv","title":"@vitest/browser: Browser Mode provider commands bypass the file-access permission gate","description":"## Summary\n\nBrowser Mode exposes a set of built-in \"commands\" that run on the Node.js side of the test runner and can touch the local filesystem (taking screenshots, managing Playwright traces, uploading files for `\u003cinput type=\"file\"\u003e`, comparing screenshots).\n\nSeveral of these commands accept a file path from the browser and act on it without checking the `allowWrite` permission gate and without confining the path to the project directory. A client that can reach the Browser Mode API can therefore read, create, overwrite, or delete files anywhere the Vitest process can access, even when `allowWrite` is `false`.\n\nThis matters most when the Browser Mode API is exposed to the network (for example `test.api.host` is set, or the dev server is reachable from another machine or origin). In that configuration `allowWrite` defaults to `false` precisely to block file access, and these commands bypass that protection. On a default localhost-only setup with trusted test code, there is no untrusted party in a position to exploit it. The gap still matters wherever you rely on `allowWrite: false` to contain untrusted test code, because these commands ignore that flag.\n\n## Affected commands and impact\n\n| Command | Operation | Impact |\n|---|---|---|\n| `upload` (Playwright + WebdriverIO) | Read | Arbitrary local file read; contents are loaded into the page and readable by test code. Highest-impact case. |\n| `takeScreenshot` (Playwright + WebdriverIO) | Write | Writes a PNG to an arbitrary path (absolute path used verbatim), creating parent directories. |\n| `screenshotMatcher` | Write | Writes reference/diff PNGs; directory derived from client path allows partial traversal. |\n| `stopChunkTrace` | Write | Writes a Playwright trace `.zip` to a path escapable via `../` in the trace name. |\n| `deleteTracing` | Delete | Deletes arbitrary files by path. |\n| `annotateTraces` | Read (disclosure) | Records a client-controlled attachment path that the reporter copies into the attachments directory, disclosing file contents. |\n\nThe writes do not let an attacker choose the file contents (they produce PNG images or trace archives), so the integrity impact is creating, overwriting, or deleting a file at an arbitrary path rather than writing a chosen payload. The reads (`upload`, `annotateTraces`) are more serious because they expose the full contents of an arbitrary file.\n\nThe fix adds, to every file-touching provider command, an `allowWrite` check for write/delete operations and path confinement to the project root (matching the existing `fs` command pattern), so client-supplied absolute paths and `../` traversal are rejected.","status":"published","published":"2026-07-21T19:36:12Z","modified":"2026-09-10T03:51:11.555752293Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical"}],"cwes":["CWE-22","CWE-552","CWE-862"],"updated_at":"2026-11-02T15:46:52.891208Z"},{"id":"CLSA-2026-1790162728","title":"TuxCare security update for vitest (1 CVE)","description":"TuxCare rebuilt vitest to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-09-23T11:25:28Z","modified":"2026-10-15T09:47:56.629377164Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1792160955","title":"TuxCare security update for @vitest/pretty-format (2 CVEs)","description":"TuxCare rebuilt @vitest/pretty-format to address 2 CVEs. Fixed in 4.0.18-tuxcare.3.","status":"published","published":"2026-10-16T14:29:11Z","modified":"2026-10-16T16:30:37.331017373Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792160965","title":"TuxCare security update for @vitest/web-worker (1 CVE)","description":"TuxCare rebuilt @vitest/web-worker to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:29:21Z","modified":"2026-10-16T16:30:45.728491982Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792161474","title":"TuxCare security update for @vitest/snapshot (2 CVEs)","description":"TuxCare rebuilt @vitest/snapshot to address 2 CVEs. Fixed in 4.0.18-tuxcare.3.","status":"published","published":"2026-10-16T14:37:54Z","modified":"2026-10-16T16:31:03.37403396Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161476","title":"TuxCare security update for @vitest/snapshot (1 CVE)","description":"TuxCare rebuilt @vitest/snapshot to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:37:56Z","modified":"2026-10-16T16:30:31.364662231Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161576","title":"TuxCare security update for @vitest/browser (1 CVE)","description":"TuxCare rebuilt @vitest/browser to address 1 CVE. Fixed in 4.0.18-tuxcare.3.","status":"published","published":"2026-10-16T14:39:36Z","modified":"2026-11-02T19:58:36.807697218Z","updated_at":"2026-11-02T20:23:21.540308Z"},{"id":"CLSA-2026-1792161578","title":"TuxCare security update for @vitest/browser (1 CVE)","description":"TuxCare rebuilt @vitest/browser to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:39:38Z","modified":"2026-10-16T16:30:17.7386973Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161609","title":"TuxCare security update for @vitest/browser-playwright (2 CVEs)","description":"TuxCare rebuilt @vitest/browser-playwright to address 2 CVEs. Fixed in 4.0.18-tuxcare.3.","status":"published","published":"2026-10-16T14:40:09Z","modified":"2026-10-16T16:30:09.177138098Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161648","title":"TuxCare security update for @vitest/browser-preview (2 CVEs)","description":"TuxCare rebuilt @vitest/browser-preview to address 2 CVEs. Fixed in 4.0.18-tuxcare.3.","status":"published","published":"2026-10-16T14:40:48Z","modified":"2026-10-16T16:31:12.995584667Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161651","title":"TuxCare security update for @vitest/coverage-istanbul (1 CVE)","description":"TuxCare rebuilt @vitest/coverage-istanbul to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:40:51Z","modified":"2026-10-16T16:31:12.993228343Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161664","title":"TuxCare security update for @vitest/coverage-v8 (1 CVE)","description":"TuxCare rebuilt @vitest/coverage-v8 to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:41:04Z","modified":"2026-10-16T16:31:13.59737712Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161721","title":"TuxCare security update for @vitest/expect (2 CVEs)","description":"TuxCare rebuilt @vitest/expect to address 2 CVEs. Fixed in 4.0.18-tuxcare.3.","status":"published","published":"2026-10-16T14:42:01Z","modified":"2026-10-16T16:31:14.705585923Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161723","title":"TuxCare security update for @vitest/expect (1 CVE)","description":"TuxCare rebuilt @vitest/expect to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:42:03Z","modified":"2026-10-16T16:31:08.226989135Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161767","title":"TuxCare security update for @vitest/mocker (2 CVEs)","description":"TuxCare rebuilt @vitest/mocker to address 2 CVEs. Fixed in 4.0.18-tuxcare.3.","status":"published","published":"2026-10-16T14:42:47Z","modified":"2026-10-16T16:31:29.283962517Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161770","title":"TuxCare security update for @vitest/mocker (1 CVE)","description":"TuxCare rebuilt @vitest/mocker to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:42:50Z","modified":"2026-10-16T16:31:29.290816723Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161833","title":"TuxCare security update for @vitest/pretty-format (1 CVE)","description":"TuxCare rebuilt @vitest/pretty-format to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:43:53Z","modified":"2026-10-16T16:31:09.692702071Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161877","title":"TuxCare security update for @vitest/spy (2 CVEs)","description":"TuxCare rebuilt @vitest/spy to address 2 CVEs. Fixed in 4.0.18-tuxcare.3.","status":"published","published":"2026-10-16T14:44:37Z","modified":"2026-10-16T16:31:17.846310475Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161879","title":"TuxCare security update for @vitest/spy (1 CVE)","description":"TuxCare rebuilt @vitest/spy to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:44:39Z","modified":"2026-10-16T16:31:16.365984544Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161944","title":"TuxCare security update for @vitest/ui (1 CVE)","description":"TuxCare rebuilt @vitest/ui to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:45:44Z","modified":"2026-10-16T16:31:19.250857252Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161976","title":"TuxCare security update for @vitest/utils (2 CVEs)","description":"TuxCare rebuilt @vitest/utils to address 2 CVEs. Fixed in 4.0.18-tuxcare.3.","status":"published","published":"2026-10-16T14:46:16Z","modified":"2026-10-16T16:31:19.90018215Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792161978","title":"TuxCare security update for @vitest/utils (1 CVE)","description":"TuxCare rebuilt @vitest/utils to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:46:18Z","modified":"2026-10-16T16:31:20.114296594Z","updated_at":"2026-11-02T15:43:51.213191Z"},{"id":"CLSA-2026-1792162035","title":"TuxCare security update for @vitest/runner (2 CVEs)","description":"TuxCare rebuilt @vitest/runner to address 2 CVEs. Fixed in 4.0.18-tuxcare.3.","status":"published","published":"2026-10-16T14:47:15Z","modified":"2026-10-16T16:31:21.215089042Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792162038","title":"TuxCare security update for @vitest/runner (1 CVE)","description":"TuxCare rebuilt @vitest/runner to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:47:18Z","modified":"2026-10-16T16:31:41.624723236Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792162062","title":"TuxCare security update for @vitest/ws-client (1 CVE)","description":"TuxCare rebuilt @vitest/ws-client to address 1 CVE. Fixed in 3.2.4-tuxcare.3.","status":"published","published":"2026-10-16T14:47:42Z","modified":"2026-10-16T16:31:35.055048328Z","updated_at":"2026-11-02T15:43:51.466048Z"},{"id":"CLSA-2026-1792450983","title":"TuxCare security update for vitest (3 CVEs)","description":"TuxCare rebuilt vitest to address 3 CVEs. Fixed in 2.1.9-tuxcare.1.","status":"published","published":"2026-10-19T23:03:03Z","modified":"2026-10-20T01:45:09.158676317Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"CLSA-2026-1793093026","title":"TuxCare security update for vitest (4 CVEs)","description":"TuxCare rebuilt vitest to address 4 CVEs. Fixed in 2.0.5-tuxcare.1.","status":"published","published":"2026-10-27T09:23:46Z","modified":"2026-10-27T13:30:02.665565012Z","updated_at":"2026-11-02T15:43:55.34846Z"}]}}