Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: browser-use Clear all filters
TI-2026-56978 CVE-2026-82640 · GHSA-jrjf-ww9v-c67g

browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage

Priority LOW 28

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00072 Published 2026-08-30 No fix listed CWE-312
TI-2026-56975 CVE-2026-82637 · GHSA-hhqw-gcq9-6cmv

browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation

Priority HIGH 70

browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrary locations by supplying absolute paths to save_recording_pat…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00412 Published 2026-08-30 No fix listed CWE-73