CVE-2026-84833: Resource Consumption in ntegrals openbrowser

This vulnerability in ntegrals openbrowser up to commit 067fc45d649baa961750da8e2f4a75d87c5c75c8 involves resource consumption triggered remotely via manipulation of an unknown functionality in the Browser Agent Message Construction component (file packages/core/src/agent/agent.ts). The product's rolling release model means no discrete version numbers are provided for affected or fixed releases. The vendor was contacted but did not respond, and no patch or remediation guidance is available. The CVSS 4.0 score is 5.3 (medium severity), with an exploit publicly available but no confirmed active exploitation.

Successful exploitation can lead to resource consumption on the affected system, potentially degrading performance or causing denial of service conditions. The vulnerability can be triggered remotely without privileges or user interaction, increasing its risk. However, no known active exploitation in the wild has been reported to date.

Patch status is not yet confirmed—check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should monitor for updates from the vendor or community. Until a fix is released, consider limiting exposure of the affected component to untrusted networks if possible.