{"data":{"id":"ff7e3e35-c7f3-47de-963f-01104bd361bc","title":"One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude","summary":"Security researchers discovered that a single malicious browser extension could hijack AI assistants in five Chromium-based products (Chrome, Perplexity Comet, Microsoft Edge, Opera Neon, and Claude in Chrome) by exploiting how these AIs are built with a \"body\" in the browser that listens only to trusted company websites. The extension could read files, control the AI to act on behalf of attackers, and access cameras and microphones, though these are researcher demonstrations requiring the malicious extension to already be installed. The vulnerabilities work because extensions with common permissions (like those used by ad blockers) can inject code into the trusted websites that the AI body listens to.","solution":"Google fixed the Chrome vulnerability (CVE-2026-0628) in Chrome version 143.0.7499.192 released in early January 2026. Microsoft fixed the Edge vulnerability (CVE-2026-55945) in Edge version 150.0.4078.48 released on July 2. The source does not mention fixes for Perplexity Comet, Opera Neon, or Claude in Chrome.","labels":["security"],"sourceUrl":"https://thehackernews.com/2026/09/one-extension-could-hijack-ai.html","publishedAt":"2026-09-16T14:36:44.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["Google","Perplexity","Microsoft","Anthropic"],"affectedVendorsRaw":["Google Gemini Live","Perplexity Comet","Microsoft Edge","Opera Neon","Claude in Chrome","Forever Security"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-16T14:36:44.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}