Skip to content
Search
paperJune 2026Unreviewed

Same-Origin Policy for Agentic Browsers

Xilong Wang, Xiaoxing Chen, Patrick Li, Dawn Song, Neil Gong

View resourcePDF

Abstract

Agentic browsers integrate autonomous AI agents into web browsers, enabling users to accomplish web tasks through natural-language instructions. The same-origin policy (SOP) is a fundamental browser security mechanism that prevents unauthorized automated cross-origin data flows induced by scripts. However, whether SOP remains effective in agentic browsers is an open question that has not been systematically studied. In this work, we bridge this gap. We first observe that an agentic browser can i

Categories

Agentic Threats

Cite

@misc{wang2026sameorigin,
  title = {{Same-Origin Policy for Agentic Browsers}},
  author = {Xilong Wang and Xiaoxing Chen and Patrick Li and Dawn Song and Neil Gong},
  year = {2026},
  month = jun,
  eprint = {2606.14027},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2606.14027}
}