CVE-2026-82637
Received Received - Intake

Directory Traversal in Browser-Use Web-UI

Publication date: 2026-08-30

Last updated on: 2026-08-30

Assigner: VulnCheck

Description
browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrary locations by supplying absolute paths to save_recording_path, save_trace_path, save_agent_history_path, or save_download_path parameters. Attackers can exploit this via the unauthenticated Gradio interface to create directories anywhere the root-running container has write access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-30
Last Modified
2026-08-30
Generated
2026-08-30
AI Q&A
2026-08-30
EPSS Evaluated
N/A
NVD
CVE-2026-82637
EUVD
EUVD-2026-68213

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
browser-use web-ui From 2.0.0 (inc) to 3.0.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-82637 is an arbitrary directory creation vulnerability in browser-use web-ui versions 2.0.0 through 3.0.0. The application fails to validate user-supplied paths in the run_agent_task function, allowing attackers to create directories at arbitrary locations by providing absolute paths to parameters like save_recording_path or save_download_path. This occurs via the unauthenticated Gradio interface and can be exploited without authentication.

Detection Guidance

Check for unexpected directories in sensitive locations like /tmp, /etc, or root paths. Inspect Gradio interface logs for unauthenticated requests to save_recording_path, save_trace_path, save_agent_history_path, or save_download_path parameters. Use commands like 'find / -type d -name ATTACKER_RECORDING 2>/dev/null' to search for suspicious directories.

Impact Analysis

This vulnerability allows attackers to create directories anywhere the container has write access. Potential impacts include disruption of process management, privilege escalation when combined with file write primitives, unauthorized directory creation in sensitive system paths like /etc/, and potential denial-of-service conditions. The application runs as root in its Docker container, amplifying the risk.

Compliance Impact

This vulnerability could violate GDPR by enabling unauthorized directory creation, potentially leading to unauthorized data access or processing. For HIPAA, it may allow attackers to create directories in sensitive system paths, risking protected health information exposure if combined with other file write primitives.

Mitigation Strategies

Upgrade to a version of browser-use web-ui beyond 3.0.0 where the vulnerability is patched. If upgrading is not possible, restrict container permissions to non-root users and implement authentication for the Gradio interface. Disable unauthenticated access to the WebUI until mitigation is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82637. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart