VulnSocial

CVE-2026-7234Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/component_server/server.js. Executing a manipulation of the argument request.url can lead to path traversal. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-28: 3Technical Details · 2026-04-28: 304-28
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-7234 A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/component_server/server.js.… https://www.cve.org/CVERecord?id=CVE-2026-7234

    Post summary

    A weakness was identified in BrowserOperator browser-operator-core up to version 0.6.0, specifically affecting the startsWith function in scripts/component_server/server.js, and the vulnerability has been reported via the CVE record link.

    00020333
    57.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7234 Path Traversal in BrowserOperator browser-operator-core Up To 0.6.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7234

    Post summary

    A path traversal vulnerability (CVE‑2026‑7234) affecting BrowserOperator browser‑operator‑core up to 0.6.0 is disclosed, with no mention of exploits, patches, or active use.

    0000039
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-7234 A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/component_server/server.js.… https://www.cve.org/CVERecord?id=CVE-2026-7234 ----- Traducción: CVE-2026-7234 Se … http://infoflow.cloud`

    Post summary

    CVE‑2026‑7234 is briefly disclosed with affected component and function details; no PoC, exploit, active exploitation, or patch information is provided.

    0000032
    73 followersView on X

Explore more

Back to dashboard