PlaywrightCapture before version 1.39.6 does not adequately restrict navigations and resource requests initiated by rendered pages, enabling an attacker to exploit browser-side redirection mechanisms such as window.location.href. This allows the capture process to open file:// URLs or request resources on private, loopback, link-local, or non-public IP addresses. In environments processing untrusted URLs, this SSRF vulnerability could be exploited to access internal services or local files. Captured artifacts like screenshots, saved page content, or logs might leak responses from these internal resources. The issue is resolved in PlaywrightCapture version 1.39.6.

An attacker can remotely induce the PlaywrightCapture process to make unauthorized requests to internal or local network resources or local files, potentially exposing sensitive information through capture artifacts. This could lead to information disclosure from internal services or local files accessible to the capture environment. There is no indication of privilege escalation or remote code execution. No known exploits in the wild have been reported.

Upgrade PlaywrightCapture to version 1.39.6 or later, where this vulnerability is fixed. Since no official remediation level or patch links are provided beyond this version information, users should verify the update availability from the vendor. No additional mitigations are specified or required once the software is updated.