Skip to content

browser-use

v0.12.7 Security

This release includes 4 security fixes for security teams reviewing exposed deployments.

Published 16d AI Agents & Assistants
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 4 known CVEs

Topics

ai-agents ai-tools browser-automation browser-use llm playwright
+1 more
python

Affected surfaces

deps auth

Summary

AI summary

Updated aiohttp, requests, Pillow, pypdf for security patches; added per-session auth token, CLI video capture command, Playwright Chromium default, UTM tracking improvements, and numerous bug fixes across tools, schema, docs, CI.

Changes in this release

Security Medium

upgrade aiohttp to 3.13.4 patches memory exhaustion vulnerability

upgrade aiohttp to 3.13.4 patches memory exhaustion vulnerability

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Security Medium

upgrade requests to 2.33.0 patches temp-file path-traversal vulnerability

upgrade requests to 2.33.0 patches temp-file path-traversal vulnerability

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Security Medium

fix(security): canonicalize non-standard IPv4 forms in block_ip_addresses

fix(security): canonicalize non-standard IPv4 forms in block_ip_addresses

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Security Medium

fix(downloads): sanitize attacker-controlled filenames and verify containment

fix(downloads): sanitize attacker-controlled filenames and verify containment

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Security Medium

Bump pillow to 12.2.0 (CVE-2026-40192)

Bump pillow to 12.2.0 (CVE-2026-40192)

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Security Medium

Bump pypdf to 6.10.2 (CVE-2026-40260)

Bump pypdf to 6.10.2 (CVE-2026-40260)

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Security Medium

Bump aiohttp to 3.13.4 (CVE-2026-34515)

Bump aiohttp to 3.13.4 (CVE-2026-34515)

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Feature Medium

Add `record start/stop` CLI command for session video capture

Add `record start/stop` CLI command for session video capture

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Feature Medium

prefer Playwright chromium over sys Chrome by default

prefer Playwright chromium over sys Chrome by default

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Feature Medium

Find more recent versions of Playwright-installed Chromium for Mac/ARM users

Find more recent versions of Playwright-installed Chromium for Mac/ARM users

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Feature Medium

Improve OSS-to-cloud conversion: UTM tracking, better error messages, and cloud nudges

Improve OSS-to-cloud conversion: UTM tracking, better error messages, and cloud nudges

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Feature Medium

Add per-link utm_medium slugs to README cloud links

Add per-link utm_medium slugs to README cloud links

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Dependency Medium

update browser-use-sdk from 2.0.15 to 3.4.2

update browser-use-sdk from 2.0.15 to 3.4.2

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Bugfix Medium

prevent KeyError in load_from_dict and IndexError in final_result

prevent KeyError in load_from_dict and IndexError in final_result

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

use setattr for LLM ainvoke patching to avoid pydantic crash

use setattr for LLM ainvoke patching to avoid pydantic crash

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

guard against missing stdin in MCP stdio server startup

guard against missing stdin in MCP stdio server startup

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

clear dom cache after scroll to prevent stale extract data

clear dom cache after scroll to prevent stale extract data

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

handle BrokenPipeError gracefully when MCP client disconnects

handle BrokenPipeError gracefully when MCP client disconnects

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

respect proxy_country_code=None to disable proxy in cloud mode

respect proxy_country_code=None to disable proxy in cloud mode

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

preserve partial action results when mid-batch action fails

preserve partial action results when mid-batch action fails

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

survive AX tree iframe detach in DOM extraction

survive AX tree iframe detach in DOM extraction

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

drop trailing 'during: None' from BrowserError messages

drop trailing 'during: None' from BrowserError messages

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

handle locked Chrome profile copies

handle locked Chrome profile copies

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

handle multi-character upper/lower in CDP typing

handle multi-character upper/lower in CDP typing

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: high

 —
Bugfix Medium

redact sensitive values in fill() debug logging

redact sensitive values in fill() debug logging

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Bugfix Medium

remove unreachable 'type' key from validation fields list

remove unreachable 'type' key from validation fields list

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Refactor Medium

add per-session auth token to daemon socket

add per-session auth token to daemon socket

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Other Medium

fix malformed HTML attributes in README picture/img tags

fix malformed HTML attributes in README picture/img tags

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Other Medium

improve connect failure UX: fix chrome://inspect link and add fallback

improve connect failure UX: fix chrome://inspect link and add fallback

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Other Medium

update issue template setup and docs links

update issue template setup and docs links

Source: granite4.1:8b-q6_K@2026-05-19

Confidence: low

 —
Full changelog

What's Changed

  • another big cli update by @ShawnPana in https://github.com/browser-use/browser-use/pull/4514
  • fix: security and correctness issues found in #4514 review by @sauravpanda in https://github.com/browser-use/browser-use/pull/4590
  • fix: upgrade aiohttp to 3.13.4 to patch memory exhaustion vulnerability by @sauravpanda in https://github.com/browser-use/browser-use/pull/4596
  • fix: upgrade requests to 2.33.0 to patch temp-file path-traversal vulnerability by @sauravpanda in https://github.com/browser-use/browser-use/pull/4597
  • fix: add per-session auth token to daemon socket by @sauravpanda in https://github.com/browser-use/browser-use/pull/4598
  • improve model docs by @laithrw in https://github.com/browser-use/browser-use/pull/4616
  • fix: prevent KeyError in load_from_dict and IndexError in final_result by @r266-tech in https://github.com/browser-use/browser-use/pull/4464
  • fix: use setattr for LLM ainvoke patching to avoid pydantic crash by @laithrw in https://github.com/browser-use/browser-use/pull/4641
  • fix: guard against missing stdin in MCP stdio server startup by @laithrw in https://github.com/browser-use/browser-use/pull/4642
  • chore: update browser-use-sdk from 2.0.15 to 3.4.2 by @sauravpanda in https://github.com/browser-use/browser-use/pull/4644
  • Improve OSS-to-cloud conversion: UTM tracking, better error messages, and cloud nudges by @Alezander9 in https://github.com/browser-use/browser-use/pull/4646
  • Add per-link utm_medium slugs to README cloud links by @Alezander9 in https://github.com/browser-use/browser-use/pull/4653
  • fix(#4631): clear dom cache after scroll to prevent stale extract data by @laithrw in https://github.com/browser-use/browser-use/pull/4658
  • fix asyncio.get_event_loop for python 3.14 compat by @laithrw in https://github.com/browser-use/browser-use/pull/4659
  • fix sensitive_data redaction order to prevent substring leaks by @laithrw in https://github.com/browser-use/browser-use/pull/4660
  • fix pagination classifier to prioritize semantic labels over glyph syms by @laithrw in https://github.com/browser-use/browser-use/pull/4661
  • fix: handle BrokenPipeError gracefully when MCP client disconnects by @laithrw in https://github.com/browser-use/browser-use/pull/4663
  • prefer Playwright chromium over sys Chrome by default by @laithrw in https://github.com/browser-use/browser-use/pull/4664
  • close alias for BrowserSession stop by @laithrw in https://github.com/browser-use/browser-use/pull/4665
  • ci: pin stale workflow action by @grtninja in https://github.com/browser-use/browser-use/pull/4656
  • improve connect failure UX: fix chrome://inspect link and add fallbac… by @ShawnPana in https://github.com/browser-use/browser-use/pull/4678
  • fix: add utf-8 encoding to Local State file read in list_chrome_profiles by @voidborne-d in https://github.com/browser-use/browser-use/pull/4690
  • fix input clear fallbacks and clarify clear-then-type behavior by @laithrw in https://github.com/browser-use/browser-use/pull/4692
  • Fix: Catch TypeError during lmnr import to prevent CLI startup crash (#4046) by @AtharvaJaiswal005 in https://github.com/browser-use/browser-use/pull/4104
  • Add record start/stop CLI command for session video capture by @sauravpanda in https://github.com/browser-use/browser-use/pull/4710
  • fix(tools): enforce per-action timeout to prevent hung event handlers by @sauravpanda in https://github.com/browser-use/browser-use/pull/4711
  • Bump pillow to 12.2.0 (CVE-2026-40192) by @sauravpanda in https://github.com/browser-use/browser-use/pull/4713
  • Bump pypdf to 6.10.2 (CVE-2026-40260) by @sauravpanda in https://github.com/browser-use/browser-use/pull/4714
  • Bump aiohttp to 3.13.4 (CVE-2026-34515) by @sauravpanda in https://github.com/browser-use/browser-use/pull/4715
  • docs: fix malformed HTML attributes in README picture/img tags by @abhicris in https://github.com/browser-use/browser-use/pull/4712
  • fix(element): redact sensitive values in fill() debug logging by @Will-hxw in https://github.com/browser-use/browser-use/pull/4736
  • fix(schema): remove unreachable 'type' key from validation fields list by @Will-hxw in https://github.com/browser-use/browser-use/pull/4734
  • docs: update issue template setup and docs links by @Ankit-Kotnala in https://github.com/browser-use/browser-use/pull/4746
  • Find more recent versions of Playwright-installed Chromium for Mac/ARM users by @alisha in https://github.com/browser-use/browser-use/pull/4680
  • fix: remove dead code 'type' from second elif branch in optimize_schema() by @kuishou68 in https://github.com/browser-use/browser-use/pull/4704
  • fix: preserve partial action results when mid-batch action fails by @toller892 in https://github.com/browser-use/browser-use/pull/4770
  • fix: survive AX tree iframe detach in DOM extraction (#4778) by @sauravpanda in https://github.com/browser-use/browser-use/pull/4797
  • fix(BrowserError): drop trailing 'during: None' when no event is attached by @LarsenCundric in https://github.com/browser-use/browser-use/pull/4787
  • fix: handle locked Chrome profile copies by @duyua9 in https://github.com/browser-use/browser-use/pull/4810
  • fix: handle multi-character upper/lower in CDP typing by @LarsenCundric in https://github.com/browser-use/browser-use/pull/4818
  • fix: respect proxy_country_code=None to disable proxy in cloud mode by @LarsenCundric in https://github.com/browser-use/browser-use/pull/4861
  • patched python-dotenv by @sauravpanda in https://github.com/browser-use/browser-use/pull/4863
  • fix(mcp): default retry_with_browser_use_agent allowed_domains to None by @sauravpanda in https://github.com/browser-use/browser-use/pull/4864
  • fix(tools): contain upload_file path inside FileSystem dir by @sauravpanda in https://github.com/browser-use/browser-use/pull/4865
  • fix(security): canonicalize non-standard IPv4 forms in block_ip_addresses by @sauravpanda in https://github.com/browser-use/browser-use/pull/4866
  • fix(downloads): sanitize attacker-controlled filenames and verify containment by @sauravpanda in https://github.com/browser-use/browser-use/pull/4867
  • Bump version from 0.12.6 to 0.12.7 by @sauravpanda in https://github.com/browser-use/browser-use/pull/4869

New Contributors

  • @r266-tech made their first contribution in https://github.com/browser-use/browser-use/pull/4464
  • @grtninja made their first contribution in https://github.com/browser-use/browser-use/pull/4656
  • @voidborne-d made their first contribution in https://github.com/browser-use/browser-use/pull/4690
  • @AtharvaJaiswal005 made their first contribution in https://github.com/browser-use/browser-use/pull/4104
  • @abhicris made their first contribution in https://github.com/browser-use/browser-use/pull/4712
  • @Will-hxw made their first contribution in https://github.com/browser-use/browser-use/pull/4736
  • @Ankit-Kotnala made their first contribution in https://github.com/browser-use/browser-use/pull/4746
  • @alisha made their first contribution in https://github.com/browser-use/browser-use/pull/4680
  • @kuishou68 made their first contribution in https://github.com/browser-use/browser-use/pull/4704
  • @toller892 made their first contribution in https://github.com/browser-use/browser-use/pull/4770
  • @duyua9 made their first contribution in https://github.com/browser-use/browser-use/pull/4810

Full Changelog: https://github.com/browser-use/browser-use/compare/0.12.6...0.12.7

Security Fixes

  • CVE-2026-34515 – upgrade aiohttp to 3.13.4 (memory exhaustion vulnerability)
  • CVE-2026-40192 – bump Pillow to 12.2.0
  • CVE-2026-40260 – bump pypdf to 6.10.2
  • Upgrade requests to 2.33.0 (temp‑file path‑traversal vulnerability)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track browser-use

Get notified when new releases ship.

Sign up free

About browser-use

Make websites accessible for AI agents. Automate tasks online with ease.

All releases →

Related context

Related CVEs

Beta — feedback welcome: [email protected]