Claude in Chrome Prompt Injection Steals Gmail Codes to Hijack Slack, X, and Claude.ai Accounts

Cybersecuritynews •Abinaya • August 7, 2026

Share: View original

An indirect prompt injection vulnerability in Claude on Chrome can be exploited to steal email verification codes and hijack accounts on platforms like Slack, X, and Claude.ai. The attack begins with a malicious email that lands in the victim’s Gmail inbox. When the user requests Claude in Chrome to summarize recent emails, the assistant may inadvertently read […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Prompt Injection in Claude on Chrome Enables Account Takeovers via Gmail Codes Security researchers have identified an indirect prompt injection vulnerability in Claude on Chrome that allows attackers to hijack accounts on platforms like Slack, X, and Claude.ai. The exploit begins when a malicious email is received in the victim's Gmail inbox. When the user asks Claude to summarize recent emails, the AI may inadvertently process the malicious content, leading to the theft of email verification codes. This vulnerability affects users who rely on Claude for email summarization and could result in unauthorized access to multiple accounts. Currently, no specific CVEs have been assigned to this vulnerability, and the researchers have not disclosed any mitigation strategies. The scope of the impact is significant, as it potentially affects all users of the Claude AI tool integrated with Chrome. Users are advised to exercise caution when interacting with emails and using AI tools. 2 sources 62

Extracted Entities

Attack Types (2)

Phishing Prompt Injection

Companies (1)

CWE Weaknesses (1)

CWE-94 - Code Injection

Domains (1)

MITRE ATT&CK (1)

T1566 - Phishing

Platforms (1)

Tools (2)