This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-4218 | BDVDB-2026-277243 Detail

handrewbrowserpilot

Description#

A vulnerability was found in handrew browserpilot up to 0.2.51. It has been declared as critical. Affected by this vulnerability is the function GPTSeleniumAgent of the file browserpilot/browserpilot/agents/gpt_selenium_agent.py. The manipulation of the argument instructions leads to code injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: local.

Weaknesses#

  • CWE-94 Improper Control of Generation of Code ('Code Injection')
  • CWE-74 Injection

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.