Search
Find a vulnerability
Search criteria
4 vulnerabilities found for web-ui by browser-use
CVE-2026-82640 (GCVE-0-2026-82640)
Vulnerability from nvd – Published: 2026-08-30 13:23 – Updated: 2026-08-30 13:23
VLAI
EPSS
VEX
Title
browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage
Summary
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files.
Severity
5.5 (Medium)
CWE
- CWE-312 - Cleartext Storage of Sensitive Information
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/browser-use/web-ui/issues/736 | issue-tracking |
| https://github.com/browser-use/web-ui | product |
| https://github.com/browser-use/web-ui/blob/v3.0.0… | technical-description |
| https://www.vulncheck.com/advisories/browser-use-… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| browser-use | web-ui |
Affected:
2.0.0 , ≤ 3.0.0
(semver)
cpe:2.3:a:browser-use:browser_use:*:*:*:*:*:*:*:* |
Date Public
2026-07-05 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/browser-use/web-ui",
"product": "web-ui",
"vendor": "browser-use",
"versions": [
{
"lessThanOrEqual": "3.0.0",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:browser-use:browser_use:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.0.0",
"versionStartIncluding": "2.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "George Chen"
}
],
"datePublic": "2026-07-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-312",
"description": "Cleartext Storage of Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-30T13:23:39.806Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Issue #736",
"tags": [
"issue-tracking"
],
"url": "https://github.com/browser-use/web-ui/issues/736"
},
{
"tags": [
"product"
],
"url": "https://github.com/browser-use/web-ui"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/browser-use/web-ui/blob/v3.0.0/src/webui/webui_manager.py"
},
{
"name": "VulnCheck Advisory: browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/browser-use-web-ui-2.0.0-through-3.0.0-cleartext-api-key-storage"
}
],
"title": "browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-82640",
"datePublished": "2026-08-30T13:23:39.806Z",
"dateReserved": "2026-08-30T13:06:07.154Z",
"dateUpdated": "2026-08-30T13:23:39.806Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82637 (GCVE-0-2026-82637)
Vulnerability from nvd – Published: 2026-08-30 13:23 – Updated: 2026-08-30 13:23
VLAI
EPSS
VEX
Title
browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation
Summary
browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrary locations by supplying absolute paths to save_recording_path, save_trace_path, save_agent_history_path, or save_download_path parameters. Attackers can exploit this via the unauthenticated Gradio interface to create directories anywhere the root-running container has write access.
Severity
5.3 (Medium)
CWE
- CWE-73 - External Control of File Name or Path
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/browser-use/web-ui/issues/737 | issue-tracking |
| https://github.com/browser-use/web-ui | product |
| https://github.com/browser-use/web-ui/blob/v3.0.0… | technical-description |
| https://www.vulncheck.com/advisories/browser-use-… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| browser-use | web-ui |
Affected:
2.0.0 , ≤ 3.0.0
(semver)
cpe:2.3:a:browser-use:browser_use:*:*:*:*:*:*:*:* |
Date Public
2026-07-05 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/browser-use/web-ui",
"product": "web-ui",
"vendor": "browser-use",
"versions": [
{
"lessThanOrEqual": "3.0.0",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:browser-use:browser_use:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.0.0",
"versionStartIncluding": "2.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "George Chen"
}
],
"datePublic": "2026-07-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrary locations by supplying absolute paths to save_recording_path, save_trace_path, save_agent_history_path, or save_download_path parameters. Attackers can exploit this via the unauthenticated Gradio interface to create directories anywhere the root-running container has write access."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-73",
"description": "External Control of File Name or Path",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-30T13:23:37.621Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Issue #737",
"tags": [
"issue-tracking"
],
"url": "https://github.com/browser-use/web-ui/issues/737"
},
{
"tags": [
"product"
],
"url": "https://github.com/browser-use/web-ui"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/browser-use/web-ui/blob/v3.0.0/src/webui/components/browser_use_agent_tab.py"
},
{
"name": "VulnCheck Advisory: browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/browser-use-web-ui-2.0.0-through-3.0.0-arbitrary-directory-creation"
}
],
"title": "browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-82637",
"datePublished": "2026-08-30T13:23:37.621Z",
"dateReserved": "2026-08-30T13:05:51.680Z",
"dateUpdated": "2026-08-30T13:23:37.621Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82640 (GCVE-0-2026-82640)
Vulnerability from cvelistv5 – Published: 2026-08-30 13:23 – Updated: 2026-08-30 13:23
VLAI
EPSS
VEX
Title
browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage
Summary
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files.
Severity
5.5 (Medium)
CWE
- CWE-312 - Cleartext Storage of Sensitive Information
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/browser-use/web-ui/issues/736 | issue-tracking |
| https://github.com/browser-use/web-ui | product |
| https://github.com/browser-use/web-ui/blob/v3.0.0… | technical-description |
| https://www.vulncheck.com/advisories/browser-use-… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| browser-use | web-ui |
Affected:
2.0.0 , ≤ 3.0.0
(semver)
cpe:2.3:a:browser-use:browser_use:*:*:*:*:*:*:*:* |
Date Public
2026-07-05 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/browser-use/web-ui",
"product": "web-ui",
"vendor": "browser-use",
"versions": [
{
"lessThanOrEqual": "3.0.0",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:browser-use:browser_use:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.0.0",
"versionStartIncluding": "2.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "George Chen"
}
],
"datePublic": "2026-07-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-312",
"description": "Cleartext Storage of Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-30T13:23:39.806Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Issue #736",
"tags": [
"issue-tracking"
],
"url": "https://github.com/browser-use/web-ui/issues/736"
},
{
"tags": [
"product"
],
"url": "https://github.com/browser-use/web-ui"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/browser-use/web-ui/blob/v3.0.0/src/webui/webui_manager.py"
},
{
"name": "VulnCheck Advisory: browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/browser-use-web-ui-2.0.0-through-3.0.0-cleartext-api-key-storage"
}
],
"title": "browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-82640",
"datePublished": "2026-08-30T13:23:39.806Z",
"dateReserved": "2026-08-30T13:06:07.154Z",
"dateUpdated": "2026-08-30T13:23:39.806Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82637 (GCVE-0-2026-82637)
Vulnerability from cvelistv5 – Published: 2026-08-30 13:23 – Updated: 2026-08-30 13:23
VLAI
EPSS
VEX
Title
browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation
Summary
browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrary locations by supplying absolute paths to save_recording_path, save_trace_path, save_agent_history_path, or save_download_path parameters. Attackers can exploit this via the unauthenticated Gradio interface to create directories anywhere the root-running container has write access.
Severity
5.3 (Medium)
CWE
- CWE-73 - External Control of File Name or Path
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/browser-use/web-ui/issues/737 | issue-tracking |
| https://github.com/browser-use/web-ui | product |
| https://github.com/browser-use/web-ui/blob/v3.0.0… | technical-description |
| https://www.vulncheck.com/advisories/browser-use-… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| browser-use | web-ui |
Affected:
2.0.0 , ≤ 3.0.0
(semver)
cpe:2.3:a:browser-use:browser_use:*:*:*:*:*:*:*:* |
Date Public
2026-07-05 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/browser-use/web-ui",
"product": "web-ui",
"vendor": "browser-use",
"versions": [
{
"lessThanOrEqual": "3.0.0",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:browser-use:browser_use:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.0.0",
"versionStartIncluding": "2.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "George Chen"
}
],
"datePublic": "2026-07-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrary locations by supplying absolute paths to save_recording_path, save_trace_path, save_agent_history_path, or save_download_path parameters. Attackers can exploit this via the unauthenticated Gradio interface to create directories anywhere the root-running container has write access."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-73",
"description": "External Control of File Name or Path",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-30T13:23:37.621Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Issue #737",
"tags": [
"issue-tracking"
],
"url": "https://github.com/browser-use/web-ui/issues/737"
},
{
"tags": [
"product"
],
"url": "https://github.com/browser-use/web-ui"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/browser-use/web-ui/blob/v3.0.0/src/webui/components/browser_use_agent_tab.py"
},
{
"name": "VulnCheck Advisory: browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/browser-use-web-ui-2.0.0-through-3.0.0-arbitrary-directory-creation"
}
],
"title": "browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-82637",
"datePublished": "2026-08-30T13:23:37.621Z",
"dateReserved": "2026-08-30T13:05:51.680Z",
"dateUpdated": "2026-08-30T13:23:37.621Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}