CVE-2026-82637: External Control of File Name or Path in browser-use web-ui
Description
browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrary locations by supplying absolute paths to save_recording_path, save_trace_path, save_agent_history_path, or save_download_path parameters. Attackers can exploit this via the unauthenticated Gradio interface to create directories anywhere the root-running container has write access.
CVSS v4.0
Score 6.9medium
Affected software
browser-use
web-ui
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The browser-use web-ui product, versions 2.0.0 through 3.0.0, contains a vulnerability where the run_agent_task function does not validate the paths provided in parameters such as save_recording_path, save_trace_path, save_agent_history_path, and save_download_path. This lack of validation allows attackers to supply absolute paths, leading to the creation of directories at arbitrary locations on the host system where the container has write permissions. The vulnerability is exploitable without authentication via the Gradio interface.
Potential Impact
An unauthenticated attacker can create directories anywhere on the host filesystem where the container running the browser-use web-ui has write access. This could potentially be used to manipulate the filesystem structure or prepare for further attacks. However, the vulnerability does not indicate direct code execution or data disclosure.
Mitigation Recommendations
No official patch or remediation information is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restricting access to the Gradio interface and limiting container write permissions can reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-30T13:05:51.680Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a943230acd9273b4997c708
Added to database: 08/30/2026, 13:37:52 UTC
Last enriched: 09/25/2026, 02:45:25 UTC
Last updated: 10/13/2026, 18:48:24 UTC
Views: 91
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.