What is CVE-2026-12823?

CVE-2026-12823 is a low-severity vulnerability in Browserbase Skills, classified under Incorrect Privilege Assignment. CVSS score: 3.3/10. Published 2026-06-22.

How severe is CVE-2026-12823?

Low severity. CVSS v3 base score is 3.3 out of 10.

Privilege escalation in Browserbase Skills

CVE-2026-12823

A security flaw has been discovered in Browserbase Skills up to 20260526. This impacts an unknown function of the component Autobrowse Trace Artifact Handler. The manipulation results in incorrect default permissions. The attack requires a…

EPSS: 0.002 (5.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Browserbase Skills — versions 20260526
N/a Browserbase — versions 20260526

Weakness classification (CWE)

References

cna@vuldb.com (vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (exploit)
cna@vuldb.com (exploit)

Frequently asked questions

What is CVE-2026-12823?: CVE-2026-12823 is a low-severity vulnerability in Browserbase Skills, classified under Incorrect Privilege Assignment. CVSS score: 3.3/10. Published 2026-06-22.
How severe is CVE-2026-12823?: Low severity. CVSS v3 base score is 3.3 out of 10.