What happened
CWE-416 use-after-free in Chromium's XML component. CISA added CVE-2026-125350 to the KEV catalog on 2026-11-10 with confirmed in-the-wild exploitation. Affects every Chromium-based browser.
Why it matters
Not AI-specific by design, but it directly affects the attack surface of AI agents and browser-use/computer-use tooling: a compromised browser session is a stepping stone to the tabs, cookies and agent accounts those tools rely on.
Attack vector
A crafted webpage triggers a use-after-free in the XML component, allowing arbitrary code execution inside the sandbox. Confirmed exploitation in the wild (CISA KEV addition 2026-11-10).
Affected systems
Google Chromium (stable-channel update 2026-11 released)
Mitigation
Apply the latest Chromium stable-channel update; CISA federal due date 2026-11-24.