Security · 18h ago
Browser-use Security: Session Risks Outweigh Click Tests
Browser-use's real attack surface is the browser session, not just agent actions. The project spans a Python library, CLI 2.0 with persistent daemon, and Actor API, each with distinct permissions. Version changes like v0.12.8 added Unix socket permissions and restricted evaluate() on profiles.
Meridian48 take
The article rightly shifts focus from agent functionality to session-level permissions, but the real test is whether developers actually audit daemon sockets and profile access.
browser-automationsecurity-review