Critical, CVSS 9.3PyPIAmendedPublished
Browser Use allows bypassing allowed_domains by putting a decoy domain in http auth username portion of a URL
CVE-2025-47241 · GHSA-x39x-9qw5-ghrf
- Affected
- PyPI browser-use < 0.1.45
- Fixed in
- 0.1.45· Vendor fix available
- Issue
- During a manual source code review, ARIMLABS.AI researchers identified that the `browser_use` module includes an embedded whitelist functionality to restrict URLs that can be visited. This restriction is enforced during agent initialization. However, it was discovered that these measures can be bypassed, leading to severe security implications. Details File: `browser_use/browser/context.py` The `BrowserContextConfig` class defines an `allowed_domains` list, which is intended to limit accessible domains. This list is checked in the `_is_url_allowed()` method before navigation: ```python @dataclass class BrowserContextConfig: """ [STRIPPED] """ cookies_file: str | None = None minimum_wait_page_load_time: float = 0.5 wait_for_network_idle_page_load_time: float = 1 maximum_wait_page_load_time: float = 5 wait_between_actions: float = 1 disable_security: bool = True browser_window_size: BrowserContextWindowSize = field(default_factory=lambda:…
Recommended action: Upgrade to 0.1.45 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.