New 'PleaseFix' Vulnerabilities Threaten Agentic Browsers with Widespread Attacks

Security researchers have identified a new class of vulnerabilities called 'PleaseFix' that severely compromise agentic browsers. These vulnerabilities allow attackers to exploit the browsers using simple English commands, leading to account takeovers and remote code execution (RCE). The removal of critical security mechanisms, such as cross-origin restrictions, has made these browsers highly susceptible to attacks. Researchers warn that these vulnerabilities enable zero-click attack chains, where users can be manipulated into interacting with malicious content. The findings indicate that all currently available agentic browsers are affected, prompting calls for improved security measures from developers. The vulnerabilities were first introduced in March 2026 with the disclosure of exploits against the Perplexed Browser. As the research continues, the scope of the vulnerabilities is expected to expand across various agentic browsers.

Key Points: • A new class of vulnerabilities called 'PleaseFix' affects all agentic browsers. • Attackers can exploit these vulnerabilities using simple English commands for zero-click attacks. • The removal of critical security mechanisms has led to significant risks, including RCE.