Csoonline Critical Vulnerabilities in Claude for Chrome Expose User Data to Attackers
Article Content
- •Two critical vulnerabilities in Claude for Chrome allow data access to attackers.
- •Malicious extensions can exploit the flaws using only six lines of JavaScript.
- •The vulnerabilities remain unpatched despite multiple updates since their discovery.
Two unpatched vulnerabilities in Anthropic's Claude for Chrome extension allow malicious browser extensions to access users' Gmail, Google Docs, and Calendar data. The flaws were reported by Manifold researchers in May 2026 but remain exploitable in version 1.0.801.0, released on July 7, 2026. Attackers can exploit these vulnerabilities using just six lines of JavaScript, posing a significant risk to user data. Despite multiple updates, the issues persist, raising concerns about the extension's security. Users of the Claude for Chrome extension are currently at risk of data breaches due to these vulnerabilities. The situation remains critical as no patches have been issued to address the flaws.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (8)
Following this threat?
Track Anthropic in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include… 
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…