Skip to content
OpenAdvisories

Product · browser-use

web-ui

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-82640

    browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage

    browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named J…

    browser-use web-ui
  • Medium 5.3
    CVE-2026-82637

    browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation

    browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrary locations by supplying absolute paths to save_recording_path, save_trace_path, save_agent_history_…

    browser-use web-ui