Security experts warn: many AI agents run headless Chrome with --no-sandbox
matthew_d_green · x · 2026-11-15
Cryptographer Matthew Green amplifies a discussion: many Chrome bugs Google no longer deems bounty-worthy can hit targets far more valuable than a random user's browser. A quoted thread notes that for headless Chrome baked into agent and CI images, the "needs a separate EoP" caveat barely matters — half of them run --no-sandbox because that's what every puppeteer-in-docker answer recommends, and nobody updates the bundled Chromium. AI agents' browser environments are thus a badly underestimated attack surface.
More from coding & agent
- sertealex first to 100% across 100 sessions, hailed by davidbau — davidbau · 2026-11-15
- AI routing explained: task rules, performance prediction, and cost-quality tradeoffs — TheTuringPost · 2026-11-15
- Ditching Claude Code ban anxiety: Factory.ai as an alternative coding agent — vista8 · 2026-11-15
- omarsar0: Without an 'eval factory' there's no 'software factory' — agent automation is worthless without evals — omarsar0 · 2026-11-15
- MaxxBench: tiny task tweaks spread coding-agent scores by 23 points — MFarajtabar · 2026-11-15
- Managing multiple Codex sessions is breaking down, Reddit user ventshelp — Excellent-Wheel7769 · 2026-11-15