CVE-2025-57283Disclosure(browserstack / browserstack-local)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js.

browserstack CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://gist.github.com/Dremig/b639c61541dd1482007dc7a5cd7fefb1

Other references

Weakness type (CWE)

CWE-94CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

browserstack-local

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

browserstack

Products

browserstack-local

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds253d
Disclosure
CVE-2025-57283 Command Injection Vulnerability in BrowserStack Local Node.js Pac... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-57283 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The post announces a command injection vulnerability (CVE-2025-57283) discovered in BrowserStack Local Node.js, providing a link to detailed information but no PoC, exploit, or mitigation details.
0000093
4.0K followersView on X
CVE@CVEnew253d
Disclosure
CVE-2025-57283 The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Loc… https://www.cve.org/CVERecord?id=CVE-2025-57283
Post summary
The entry announces a command injection flaw in browserstack‑local 1.5.8, caused by an unsanitized logfile argument, but provides no evidence of exploitation, PoC, or patch.
00000230
56.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	browserstack	browserstack-local	1.5.8	node.js	-

Explore more

Back to dashboard browserstack CVEs browserstack-local vulnerabilities