Chrome Vulnerability: Malicious Extensions Abuse Gemini

Security researchers have identified a serious flaw in Google Chrome that allows malicious extensions to abuse the Gemini Live AI panel. By exploiting this vulnerability, extensions can gain elevated privileges, accessing operating system functionalities that would normally be inaccessible.

Vulnerability Details

The vulnerability lies in the integration between Chrome and the Gemini panel. A compromised extension can hijack calls to the AI and, as a result, inherit the associated permissions. This bypasses the normal security restrictions imposed by the browser, opening the door to potential attacks.

Security Implications

This vulnerability represents a significant risk to Chrome users' security. A malicious extension could, for example, access sensitive data, install malware, or control the operating system. It is crucial that users update Chrome to the latest version to protect themselves from this threat.