Please report vulnerabilities privately through GitHub Security Advisories for browser-use/macos-harness.

macOS Harness can control applications and read visible UI content with the permissions the user grants it. Treat agent instructions and third-party UI as untrusted input, review irreversible actions, and grant the minimum permissions needed for the task.