diff --git a/backend/scripts/verify_budget_versions_ui_browser.py b/backend/scripts/verify_budget_versions_ui_browser.py
index 8f25964a..6c671897 100644
--- a/backend/scripts/verify_budget_versions_ui_browser.py
+++ b/backend/scripts/verify_budget_versions_ui_browser.py
@@ -142,7 +142,13 @@ def main():
     c = CDP(ws)
     c.call("Page.enable")
     c.call("Runtime.enable")
-    time.sleep(4)
+    # 等待页面导航到 cma 域完成（约 blank → login 竞态修复，2026-09-07 复跑实测：
+    # Target.createTarget 后偶发停留在 about:blank → 访问 localStorage 抛 SecurityError）
+    nav = wait_for(c, "location.hostname === 'cma.sxbh.ltd'", timeout=25)
+    if not nav:
+        print("FAIL: 页面未导航到 cma.sxbh.ltd")
+        sys.exit(1)
+    time.sleep(3)
 
     # 1) 登录博海 entity=2
     r = login_via_fetch(c, 2)