What’s Vulnerable › Products

browserstack-runner vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your browserstack-runner version is affected

Latest browserstack-runner vulnerabilities

• CVE-2026-49144 — BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler (CVSS 6.5)
• CVE-2026-49143 — BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler (CVSS 8.8)