CVE-2026-82637 browser-use CVE debrief

Who should care

Users of browser-use web-ui versions 2.0.0 through 3.0.0, administrators of affected systems, security teams monitoring for potential directory creation activity, and operators responsible for maintaining the affected product deployments should be aware of this vulnerability and take necessary precautions to mitigate the risk.

Technical summary

The browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrary locations by supplying absolute paths to save_recording_path, save_trace_path, save_agent_history_path, or save_download_path parameters via the unauthenticated Gradio interface. This vulnerability can lead to potential directory creation at arbitrary locations where the root-running container has write access.

Defensive priority

Medium-priority defensive tasks are recommended due to the unauthenticated nature of the vulnerability and potential for directory creation.

Recommended defensive actions

• Verify and restrict access to the Gradio interface.
• Limit container write access to necessary directories only.
• Monitor for suspicious directory creation activity.
• Apply vendor remediation when available.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The evidence for this CVE is limited, primarily based on official records indicating that browser-use web-ui versions 2.0.0 through 3.0.0 are vulnerable to arbitrary directory creation via the unauthenticated Gradio interface. Defenders should verify the affected versions, review access controls for the Gradio interface, and monitor for suspicious directory creation activity. Additional verification tasks include reviewing container write access permissions and ensuring that necessary mitigations are in place.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.