The flaw originates from insufficient policy enforcement in the Chrome DevTools MCP component that runs on Linux. A local user who can place a specially crafted file in the MCP directory can cause the component to read or write any file on the system. This results in a local privilege escalation that gives the attacker complete confidentiality and integrity permissions for the affected system.

Affected users are those running Google Chrome on Linux with the Chrome DevTools MCP module version earlier than 1.5.0. The vulnerability applies to the chrome-devtools-mcp component distributed by Google via the Chrome Developer Tools package.

Although no public exploit is reported and the vulnerability is not listed in the CISA KEV catalog, the local nature of the exploit combined with the ability to read and write arbitrary files makes it a medium‑severity issue. The lack of an EPSS score means that the current exploitation probability is unknown, but in environments where local users have the ability to manipulate files in the MCP directory, the risk remains significant. There are no known mitigations other than applying the official update to version 1.5.0 or later.