CVE-2026-87897: SSRF
A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low privileged attacker could continually exploit this vulnerability to leak the JWT authentication token for another user when they start a recording, which then enables the attacker read/write access to the victim's Whiteboard.
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker needs a low-privileged account and must be able to induce the targeted user to start a recording. Exploitation uses SSRF to access internal Chrome DevTools Protocol APIs and obtain the victim's JWT authentication token.
What access does a stolen token provide?
A leaked JWT token enables read and write access to the victim's Whiteboard. The vulnerability affects confidentiality and integrity, with no availability impact indicated.
Can the attacker target users repeatedly?
Yes. The issue can be continually exploited when users start recordings, allowing a low-privileged attacker to repeatedly attempt to obtain other users' JWT tokens.