Skip to content

Vendor

webdriverio vulnerabilities

1 published CVE affecting webdriverio, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of webdriverio alerts

Products

Latest webdriverio CVEs

Newest publication first

  1. CVE-2026-25244 WebdriverIO has Command Injection in the BrowserStack Service

    Published
    CriticalCVSS 9.8

    WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and Appium. Versions below 9.24.0 contain a command injection vulnerability leading to remote code execution (RCE) in test orchestration. Git permits branch names contai...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.