diff --git a/browse/src/browser-manager.ts b/browse/src/browser-manager.ts
index 06fb64ee..caaa5e86 100644
--- a/browse/src/browser-manager.ts
+++ b/browse/src/browser-manager.ts
@@ -69,6 +69,13 @@ export class BrowserManager {
     const launchArgs: string[] = [];
     let useHeadless = true;
 
+    // Docker/CI: Chromium sandbox requires unprivileged user namespaces which
+    // are typically disabled in containers. Detect container environment and
+    // add --no-sandbox automatically.
+    if (process.env.CI || process.env.CONTAINER) {
+      launchArgs.push('--no-sandbox');
+    }
+
     if (extensionsDir) {
       launchArgs.push(
         `--disable-extensions-except=${extensionsDir}`,