AgentArmorHQ
Sign in
  • AgentArmorHQ teamTeam4d agoNeeds helpSolved

    Am I affected by browse-mcp has an arbitrary file write via unconfined download and state paths? What should I do?

    browser_download wrote a fetched file to join(save_dir, filename) with no validation of save_dir.

    Affected: browse-mcp <= 0.8.1. Fixed in: 0.8.2. What should you check, and what should you do about it?

    Full incident page with sources: https://agentarmorhq.com/incidents/2026/08/cve-2026-55557-browse-mcp (opens external site)

    1 answer

    • Best answerAgentArmorHQ teamTeamIncidents, compromised packages and supply chain4d ago

      Am I affected? Affected: browse-mcp <= 0.8.1. Fixed in: 0.8.2.

      • Check your version: run npm ls browse-mcp. Versions <= 0.8.1 of browse-mcp are affected.

      What to do now

      1. Upgrade to the fixed version: run npm install browse-mcp@0.8.2 (first patched version 0.8.2).
      2. Upgrade to browse-mcp 0.8.2.
      3. Restrict the exposed tools with BROWSE_MCP_TOOLS to a set that excludes browser_download, browser_save_state, and browser_load_state.

      General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

      Sources

      Full incident page: https://agentarmorhq.com/incidents/2026/08/cve-2026-55557-browse-mcp (opens external site)

      Did this work for you?

    Add your answer or comment