VulnSocial

CVE-2026-45727Patch

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

CloakBrowser is a tool to bypass bot detection tests. Prior to version 0.3.28, the cloakserve CDP multiplexer uses the user-supplied fingerprint query parameter directly as a filesystem path component when creating Chrome profile directories. An unauthenticated attacker who can reach the cloakserve port can supply a crafted fingerprint value containing path traversal sequences to resolve user_data_dir outside the configured data_dir. When Chrome fails to start or the process is cleaned up, shutil.rmtree() deletes the traversed path, resulting in arbitrary directory deletion. Additionally, cloakserve bound to 0.0.0.0 by default, making it network-exposed. This issue has been patched in version 0.3.28.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 4 signals
  • Technical details provided in 4 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 4d ago at 1 mentions (2026-06-17); latest day: 1
  • 5 total mentions across 5 days

Deep dive

Activity timeline5 mentions / 5d
00111Mentions · 2026-06-17: 1Mentions · 2026-06-19: 1Mentions · 2026-06-20: 1Mentions · 2026-06-21: 1Mentions · 2026-06-22: 1Patch / Workaround · 2026-06-17: 1Patch / Workaround · 2026-06-19: 1Patch / Workaround · 2026-06-20: 1Patch / Workaround · 2026-06-22: 1Technical Details · 2026-06-17: 1Technical Details · 2026-06-19: 1Technical Details · 2026-06-20: 1Technical Details · 2026-06-22: 106-1706-1906-2006-2106-22
Signal classification3 categories
Patch
360.0%
Disclosure
120.0%
General
120.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-06-171
Patch1
2026-06-191
Disclosure1
2026-06-201
Patch1
2026-06-211
General1
2026-06-221
Patch1
Full discourse5 posts
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Patch

    CVE-2026-45727 CloakBrowser 0.3.28以前の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/16/cve-2026-45727-cloakbrowser-0328/ #IT #Security #cybersecurity

    Post summary

    A Japanese article explains CVE‑2026‑45727 affecting CloakBrowser, covering its impact range and providing countermeasures and patch guidance.

    0000040
    208 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    CVE-2026-45727 CloakBrowser 0.3.28以前の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/16/cve-2026-45727-cloakbrowser-0328/ #IT #Security #cybersecurity

    Post summary

    The text references a blog post about CVE‑2026‑45727 but does not provide PoC, exploit, patch, or technical details.

    0000040
    208 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Patch

    CVE-2026-45727 CloakBrowser 0.3.28以前の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/16/cve-2026-45727-cloakbrowser-0328/ #IT #Security #cybersecurity

    Post summary

    The post offers a detailed explanation of CVE‑2026‑45727 in CloakBrowser 0.3.28, covering its impact and mitigation steps, including patch availability.

    0000046
    208 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    CVE-2026-45727 CloakBrowser 0.3.28以前の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/16/cve-2026-45727-cloakbrowser-0328/ #IT #Security #cybersecurity

    Post summary

    The article explains CVE‑2026‑45727 affecting CloakBrowser 0.3.28 and earlier, detailing the vulnerability, its impact scope, and recommended mitigation steps.

    0000051
    209 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Patch

    CVE-2026-45727 CloakBrowser 0.3.28以前の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/16/cve-2026-45727-cloakbrowser-0328/ #IT #Security #cybersecurity

    Post summary

    The post links to an article that explains the CVE-2026-45727 vulnerability in CloakBrowser 0.3.28, outlining its impact and mitigation steps, but does not provide any PoC, exploit code, or evidence of active exploitation.

    0000043
    209 followersView on X

Explore more

Back to dashboard