Homebrew 7.0.0 gets built-in GUI, better security controls
Homebrew package manager version 7.0.0 has been released with a built-in vulnerability scanner, stronger security controls, and the full release of its native BrewUI graphical interface.
Homebrew 7.0.0 adds a built-in vulnerability scanner, a Homebrew-specific advisory database and the full release of BrewUI, the project's native graphical interface for macOS.
The release is primarily a security and usability upgrade rather than a newly disclosed vulnerability. Homebrew is widely used to install command-line tools and desktop software, making its package ecosystem relevant to endpoint security.
On macOS 26 and later, BrewUI provides a graphical way to browse packages and inspect dependencies. The release also adds the brew vulns command, which can scan installed formulae, a selected formula or dependencies declared in a Brewfile.
Homebrew's scanner resolves upstream repository and version information and queries OSV.dev for vulnerability records, while the new advisory database records Homebrew-specific fixes in OSV-compatible form.
The installation sandbox now blocks access to users' home directories by default, and network-enabled dependency downloads are separated from offline installation.
For defenders, the practical change is a more direct inventory-to-vulnerability workflow: upgrade to 7.0.0, run brew vulns and review the resulting package exposure.
Because threat actors have used fake Homebrew sites and social-engineering lures to distribute information stealers, the new controls should be paired with approved software sources and normal endpoint protections.
What happened
Homebrew 7.0.0 adds a built-in vulnerability scanner, a Homebrew-specific advisory database and the full release of BrewUI, the project's native graphical interface for macOS.
The release is primarily a security and usability upgrade rather than a newly disclosed vulnerability. Homebrew is widely used to install command-line tools and desktop software, making its package ecosystem relevant to endpoint security.
What changed
On macOS 26 and later, BrewUI provides a graphical way to browse packages and inspect dependencies. The release also adds the brew vulns command, which can scan installed formulae, a selected formula or dependencies declared in a Brewfile.
Homebrew's scanner resolves upstream repository and version information and queries OSV.dev for vulnerability records, while the new advisory database records Homebrew-specific fixes in OSV-compatible form.
The installation sandbox now blocks access to users' home directories by default, and network-enabled dependency downloads are separated from offline installation.
Who is affected
The immediate population is anyone maintaining Homebrew installations, particularly macOS administrators and developers who rely on formulae and casks across managed endpoints.
Why it matters
Homebrew can now provide a more direct inventory-to-vulnerability workflow. Teams can upgrade to 7.0.0, run brew vulns across managed installations and use the advisory data when assessing package exposure.
Technical details
The scanner can use installed-package information from SBOM data or formula definitions, query OSV.dev in batches and check whether Homebrew has already applied a security patch to the relevant formula.
Response
Homebrew 7.0.0 is available through the project's normal distribution channels with the new security controls included.
What security teams should do
Upgrade managed Homebrew installations to 7.0.0 where practical, run brew vulns across supported endpoints and review vulnerable formulae.
Because threat actors have used fake Homebrew sites and social-engineering lures to distribute information stealers, continue to enforce approved software sources and endpoint controls.
What remains unknown
The release does not mean every third-party package is automatically safe; the scanner depends on package metadata and vulnerability records available to Homebrew and OSV.dev.
Attribution
BleepingComputer reported the Homebrew 7.0.0 release and its new security and BrewUI features.
What to watch next
Watch how Homebrew's advisory database and scanner are adopted by endpoint-management and software-inventory tooling.