Agentic Browsers Rewind Web Security by 20 years

A newly discovered class of flaws, known as PleaseFix, affects agentic browsers, making them vulnerable to social engineering attacks. These flaws also expose weaknesses in the browsers' handling of cross-origin requests, which can be exploited by attackers. This vulnerability has significant implications for web security, effectively rolling back security measures by 20 years. The PleaseFix flaws highlight the need to reexamine the security of agentic browsers. The weaknesses in cross-origin request handling can be leveraged to launch targeted attacks. Overall, the discovery of the PleaseFix class of flaws raises concerns about the security of agentic browsers.