Grafana k6 v0.3.0+ File Path Disclosure via convert_playwright_script Prompt
CVE-2026-89039 Published on October 5, 2026
Arbitrary file read via the convert_playwright_script prompt in mcp-k6
A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_script argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory (path traversal). The working-directory restriction applied to '@'-prefixed paths can also be bypassed with a symbolic link inside the working directory that points outside it.
Weakness Types
What is a Directory traversal Vulnerability?
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CVE-2026-89039 has been classified to as a Directory traversal vulnerability or weakness.
Improper Protection of Alternate Path
The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.
Affected Versions
Grafana mcp-k6:- Version 0.3.0 and below 0.7.0 is affected.