The vulnerability in chrome-devtools-mcp (CVE-2026-53766) involves improper limitation of a pathname to a restricted directory (CWE-22) due to the use of path.resolve() which does not canonicalize symbolic links. The McpContext.validatePath() method checks if a file path falls under configured workspace roots by textual comparison, but symlinks inside the root can point outside, bypassing this check. This allows an attacker to read files outside the workspace via upload_file or overwrite files outside the workspace through symlinked paths. The vulnerability affects versions >=0.24.0 and <1.1.0 and is fixed in 1.1.0.

The vulnerability allows an attacker with local privileges to bypass workspace boundaries and perform unauthorized file read and write operations outside the configured workspace roots. This can lead to integrity violations by overwriting files and potential information disclosure by reading arbitrary files. The CVSS score is 6.1 (medium severity) with low attack vector (local), low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact.

Upgrade chrome-devtools-mcp to version 1.1.0 or later, where this path traversal vulnerability is fixed. No other mitigations are documented. Patch status is not explicitly stated in vendor advisories but the fix is confirmed in version 1.1.0.