This vulnerability in Browserbase Skills (up to 20260526) affects the Autobrowse Trace Artifact Handler component by setting incorrect default permissions. This misconfiguration could allow a local attacker with limited privileges to gain unauthorized access or perform unauthorized actions due to overly permissive settings. The flaw does not require user interaction and has a low complexity attack vector. Although an exploit is publicly available, there is no vendor-provided patch or official remediation at this time.

The vulnerability allows a local attacker to exploit incorrect default permissions, potentially leading to unauthorized access or privilege escalation within the affected component. The impact is limited by the requirement for local access and the absence of user interaction. The CVSS score of 4.8 reflects a medium severity risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround has been provided, users should restrict local access to trusted personnel only and monitor for any suspicious activity related to the affected component until a patch is released.