Lookyloo's PlaywrightCapture implements an only_global_lookup option intended to restrict captures from accessing local, loopback, or non-public network resources. However, favicon retrieval was performed separately from the browser's protections, using aiohttp.ClientSession to fetch URLs extracted from rendered HTML. An attacker controlling a processed web page could craft a favicon URL pointing to internal or loopback addresses, causing the PlaywrightCapture host to issue HTTP requests to these otherwise restricted destinations. This SSRF vulnerability could enable internal service discovery or interaction with internal HTTP endpoints. The patch adds a common URL validation routine applied to favicon retrieval, rejecting non-global IPs, localhost, .local domains, malformed URLs, and other explicitly non-public destinations before making requests. This fix complements a related vulnerability CVE-2026-44439.

An attacker able to control or supply a web page processed by PlaywrightCapture can cause the host to make HTTP requests to internal network services or other non-public resources. This may allow internal service discovery or interaction with internal HTTP endpoints that should not be accessible, potentially exposing sensitive internal infrastructure. The vulnerability does not require privileges or user interaction beyond supplying the crafted page. The CVSS score of 5.1 indicates a medium severity impact with network attack vector and low complexity.

A patch has been released that introduces URL validation for favicon retrieval, rejecting requests to non-global IP addresses, localhost, .local domains, malformed URLs, and other non-public destinations. Users should upgrade PlaywrightCapture to version 1.40.6 or later to apply this fix. Since this is not a cloud service, remediation requires updating the affected software. There is no indication that the vulnerability is already mitigated or that no action is required.