PleaseFix vulnerability class exposes agentic browsers to cross-origin exploitation

Researchers identified a class of vulnerabilities dubbed 'PleaseFix' that enables social engineering attacks against agentic browsers by manipulating cross-origin request handling. The flaw allows malicious actors to bypass security controls, effectively reverting browser security to legacy standards. It remains unclear how many browser vendors are currently susceptible to this specific exploit vector.