What is CVE-2026-12823?

CVE-2026-12823 is a low-severity vulnerability in Browserbase, classified under Incorrect Privilege Assignment. CVSS score: 3.3/10. Published 2026-06-22.

How severe is CVE-2026-12823?

Low severity. CVSS v3 base score is 3.3 out of 10.

Privilege escalation in Browserbase

CVE-2026-12823

A security flaw has been discovered in Browserbase up to 20260526. This impacts an unknown function of the component Autobrowse Trace Artifact Handler. The manipulation results in incorrect default permissions. The attack requires a local…

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

N/a Browserbase — versions 20260526

Weakness classification (CWE)

CWE-266 — Incorrect Privilege Assignment
CWE-276 — Incorrect Default Permissions

References

cna@vuldb.com (vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (exploit)
cna@vuldb.com (exploit)

Frequently asked questions

What is CVE-2026-12823?: CVE-2026-12823 is a low-severity vulnerability in Browserbase, classified under Incorrect Privilege Assignment. CVSS score: 3.3/10. Published 2026-06-22.
How severe is CVE-2026-12823?: Low severity. CVSS v3 base score is 3.3 out of 10.