browser-use

Products

ProductCVEsExploitedLatest
web-ui2–Aug 30, 2026
browser-use1–May 3, 2025

Exploited and recent CVEs

  • CVE-2026-82640 Medium 5.5 browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage <0.1%
  • CVE-2026-82637 Medium 5.3 browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation 0.4%
  • CVE-2025-47241 Medium 4.0 In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component. 0.5%