IA Squad
SearchPT

chrome-devtools-mcp

js · chrome-devtools-mcpHeads-up

chrome-devtools-mcp: Symlink attack via PID file in /tmp

The chrome-devtools-mcp daemon writes its PID file to a deterministic path under /tmp without using O_NOFOLLOW, allowing a local a

18 Jun 2026 · schedule it