Brave Browser Patches Actively Exploited Chromium Zero-Day in Emergency v1.91.171 Update

Brave Software pushed an emergency browser update Tuesday, patching an Actively Exploited zero-day vulnerability in the Chromium engine that powers its desktop and mobile browsers.

Version 1.91.171 upgrades the underlying engine to Chromium 149.0.7827.103, directly addressing the security flaw that attackers have already used in the wild.

Security Fix Drives Rapid Release

The update arrived days after Brave shipped v1.91.169, a major release that brought custom search engine support and the Chromium v149 framework to Android users.

That prior release also marked the official desktop and Android launch of Brave Origin — the company’s new platform layer that restructures how the browser handles Web3 and privacy features.

Rapid iteration following a platform shift of that scale carries risk, and v1.91.171 bears that out.

Origin Transition Bugs Addressed

Beyond the zero-day fix, Brave’s development team patched a transition Bug That prevented Cardano wallet support from disabling correctly when users upgraded to Origin.

Developers also removed the “Survey Panelist” toggle from the browser’s privacy settings page at `brave://settings/privacy`.

Meanwhile, Linux users received a fix for a separate bug that caused P3A and usage diagnostic pings — anonymized telemetry data Brave uses to measure feature adoption — to appear incorrectly on the browser’s first launch after the Origin upgrade.

How to Update

Desktop users on Windows, macOS, and Linux should already have the update delivered automatically in the background.

To confirm, users can open the browser menu and select “About Brave,” which triggers an immediate check and download if the update has not yet installed.

Android users face a short wait. The update is pending a standard Google Play Store review and has not yet reached devices.

Brave has not confirmed a specific rollout date for Android.

iOS and Standalone Origin App

iOS users have not yet received the Origin platform at all. Brave said the iOS rollout will follow but gave no firm timeline.

The company is also weighing whether to release Origin as a standalone Android application rather than continue integrating it into the main browser app, according to information Brave shared publicly.

Brave Browser, built on the open-source Chromium project maintained by Google, markets itself on privacy protections including built-in ad blocking and tracker prevention. StatCounter data places Chromium-based browsers at roughly 77% of global desktop browser market share as of early 2026.