This vulnerability in Browserbase affects an unspecified function within the Autobrowse Trace Artifact Handler component, resulting in incorrect default permissions. The issue requires an attacker to have local access and low privileges to exploit. The CVSS 4.0 vector indicates low attack complexity and no user interaction is needed. The vendor has not provided any response or patch, and the exploit is publicly available, though no known exploits in the wild have been reported.

The vulnerability allows a local attacker with low privileges to manipulate default permissions incorrectly, potentially leading to unauthorized access or modification of artifacts handled by the Autobrowse Trace Artifact Handler. The impact is limited by the requirement for local access and the absence of privilege escalation or remote exploitation vectors in the available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should restrict local access to trusted users only and monitor for suspicious local activity related to Browserbase. Avoid running untrusted code locally until a patch or official mitigation is released.