On August 27, 2026, Kameleo released updates to the Chroma 152 and Junglefox 153 browser engines. According to the browser engine release page, both updates fixed an issue that could leak the real IP address through WebRTC when using a proxy. On September 1, Chroma 152 received another update with the same description.
There was no separate announcement: Kameleo did not mention the leak on its blog or Telegram channel. It is unknown which engine version introduced the issue, which profiles it affected, or how long it persisted.
Alongside the fix, Chroma 152 added protection against port scanning through WebRTC. It uses Chromium's LocalNetworkAccessChecksWebRTC mechanism and blocks access only to loopback addresses by default. The kameleo:
Chroma 152 itself was released on August 24, based on Chromium 152.0.7977.54. It also fixed a case where a user-supplied --disable-features flag could break fingerprint masking. Command-line arguments without two leading hyphens are now deprecated: for example, headless must now be written as --headless.
What to do: Kameleo downloads and updates its browser engines automatically. To prevent WebRTC from bypassing the proxy over UDP, the documentation recommends setting webrtc.
