BragJack attacks hijack AI browser agents through malicious extensions

Summary

Security researcher Gal Weizman of Forever Security disclosed BragJack, an attack that uses one malicious browser extension to hijack AI assistants in five Chromium-based browsers or assistants: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon, and Claude in Chrome. The attack requires the extension to be installed already, and it can then run without user interaction to abuse the assistant's privileges, such as reading local files, taking screenshots, and sending instructions to agents. The research produced two CVEs, CVE-2026-0628 for Chrome and CVE-2026-55945 for Microsoft Edge, and more than $20,000 in bug bounties.

Mitigation

Both Google and Microsoft have since resolved the flaws they were assigned.

Topics

• AI agents
• Model and package supply chain

Related items

• InfoJim Cramer has three lingering questions about Anthropic ahead of its historic IPOSame vendor · CNBC Technology
• Infollm-gemini 0.37Same vendor · Simon Willison's Weblog
• InfoGoogle’s new Gemini model is better at understanding complicated questionsSame vendor · The Verge (AI)
• InfoNo, AI agents did not discover a previously unknown Maya siteSame vendor · The Verge (AI)
• InfoJensen Huang built an AI kingdom. Now he’s gone, will Nvidia’s ramparts be breached?Same vendor · The Guardian Technology