AIKIDO-2026-462988

TL;DR

PlaywrightCapture stores capture-specific configuration and runtime data in mutable class-level variables instead of per-instance variables. When multiple Capture objects run inside the same Python process they share state such as cookies, HTTP headers, credentials, browser storage, proxy configuration, and captured request data. A capture can therefore inherit or expose another capture's session data, disclosing sensitive information or issuing requests under another capture's authentication context. The fix initializes all capture-specific settings and request data as instance variables in the Capture constructor so state is isolated between capture operations.