Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads
Summary
Researchers found that any browser extension able to run scripts on claude.ai can trigger Claude for Chrome to access your Gmail, Google Docs, and Calendar by forging a fake click, since the extension doesn't verify that clicks are from real users rather than scripts. The flaw is rated as high or critical severity depending on whether you have the "Act without asking" automation mode enabled, and while a simple one-line fix exists, Anthropic has not yet released it in the current version 1.0.80.
Solution / Mitigation
The quickest guard is to turn "Act without asking" off and review any extension with permission to read or change data on claude.ai. Researchers also note that "the one-line fix, the researchers say, rejects synthetic clicks at the top of the handler" but confirm this fix "has not shipped" as of July 14.
Classification
Affected Vendors
Related Issues
Original source: https://thehackernews.com/2026/07/claude-for-chrome-flaw-lets-other.html
First tracked: July 14, 2026 at 08:00 PM
Classified by LLM (prompt v3) · confidence: 92%