VulnSocial

CVE-2026-89039

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_script argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory (path traversal). The working-directory restriction applied to '@'-prefixed paths can also be bypassed with a symbolic link inside the working directory that points outside it.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22CWE-424

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-14: 110-14
Full discourse1 post
  • IA en Bruto@IAenBruto

    Grafana mcp-k6: CVE-2026-89039 (6.5). El prompt `convert_playwright_script` devolvía cualquier archivo legible por el user del server — SSH keys y cloud creds incluidos. Bare path → sin fence de cwd. `~` → home. Symlink dentro del working dir bypaseaba el check de paths `@`. Afecta 0.3.0–<0.7.0. Fix: ≥0.7.0 (ojo: 0.7.0 no publicó container image). Tip: upgrade ya; hasta verificar, deshabilitá ese prompt, corré el MCP como user low-priv sin secrets en home, rotá keys que pudo leer. ¿Qué versión te da `mcp-k6 --version` (o el bin/paquete que uses)?

    0000050
    135 followersView on X

Explore more

Back to dashboard