CVE record · 1 source
CVE-2026-89039
CVSS 6.5The convert_playwright_script prompt in the k6 MCP server accepts a file path as its playwright_script argument.
- Vendor
- Canonical
- Product
- canonical
- CVSS
- 6.5
- Exposure class
- AI infrastructure
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The convert_playwright_script prompt in the k6 MCP server accepts a file path as its playwright_script argument.
The convert_playwright_script prompt in the k6 MCP server accepts a file path as its playwright_script argument. Paths given in the documented '@'-prefixed form are restricted to the server's current working directory, but a bare…