CVE-2026-59804 Details
Description
Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication and CORS misconfiguration vulnerability that allows unauthenticated remote attackers to hijack active bridge sessions by opening a cross-origin WebSocket connection to the local Socket.IO server, which performs no Origin header validation and requires no authentication token. Attackers can connect from any web page visited by the victim to seize the single-client slot, intercept and inject automation commands, exfiltrate command-payload data, or unconditionally terminate the server by supplying the MIDSCENE_BRIDGE_SIGNAL_KILL query parameter.
A vulnerability in Midscene Bridge Server in versions through 1.10.3 allows unauthenticated remote attackers to hijack active bridge sessions. This is achieved by opening a cross-origin WebSocket connection to the local Socket.IO server, which lacks proper Origin header validation and authentication token requirements. Attackers can exploit this vulnerability by connecting from any web page visited by the user to take over the single-client slot, intercept and inject automation commands, exfiltrate command-payload data, or terminate the server using the MIDSCENE_BRIDGE_SIGNAL_KILL query parameter.
Users can update to Midscene Bridge Server version 1.10.4 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 8, 2026CISA-ADP
Assessed Jul 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/web-infra-dev/midscene/commit/86f4118d1d847041c63d79e347e08c87c3f1a882 | [email protected] | Source CodeVendor |
| https://github.com/web-infra-dev/midscene/issues/2752 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/web-infra-dev/midscene/pull/2759 | [email protected] | Source CodeVendor |
| https://www.vulncheck.com/advisories/midscene-bridge-server-session-hijack-via-unauthenticated-websocket | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1385 | Missing Origin Validation in WebSockets | [email protected] |
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Midscene Bridge Server | <= 1.10.3 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 9, 2026 | CVE Modified | CISA-ADP |
| Jul 8, 2026 | New CVE Received | [email protected] |