Feeds.Feedburner

MCP API in Comet Browser Enables Full Device Control via Extensions

First seen 19 Nov 2025, 16:15 UTC • Csoonline

+3 •97% similarity •35.8

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

SquareX has revealed a hidden MCP API in the Comet AI browser that allows extensions to execute arbitrary commands on users' devices. This API bypasses security measures found in traditional browsers, posing risks to user data and device integrity. The discovery raises significant security concerns for users of AI-powered browsers.

ThreatCluster AI How this analysis works

Attack Flow

23 entities, 41 inferred relationships (STIX 2.1).

Technique (7)

Data Breach
Malware
Phishing
Cross-site Scripting
Masquerading
T1557 - Adversary-in-the-Middle
T1566 - Phishing

Organization (2)

Perplexity
SquareX

Malware (1)

Comet

Affected Platform (6)

Perplexity.ai
Chromium
Comet AI Browser
Comet Browser
Firefox
Safari

Threat Actor (1)

WannaCry

Tool (3)

Chrome
Agentic Extension
Analytics Extension

Vulnerability (3)

XSS
MCP API
Comet Browser Flaw

Relationships

WannaCry uses Comet
WannaCry uses Chrome
WannaCry uses Agentic Extension
WannaCry uses Analytics Extension
WannaCry uses Data Breach
WannaCry uses Malware
WannaCry uses Phishing
WannaCry uses Cross-site Scripting
WannaCry uses Masquerading
Comet exploits XSS
Comet exploits MCP API
Comet exploits Comet Browser Flaw
Chrome exploits XSS
Chrome exploits MCP API
Chrome exploits Comet Browser Flaw
Agentic Extension exploits XSS
Agentic Extension exploits MCP API
Agentic Extension exploits Comet Browser Flaw
Analytics Extension exploits XSS
Analytics Extension exploits MCP API
Analytics Extension exploits Comet Browser Flaw
XSS targets Perplexity.ai
XSS targets Chromium
XSS targets Comet AI Browser
XSS targets Comet Browser
MCP API targets Perplexity.ai
MCP API targets Chromium
MCP API targets Comet AI Browser
MCP API targets Comet Browser
Comet Browser Flaw targets Perplexity.ai
Comet Browser Flaw targets Chromium
Comet Browser Flaw targets Comet AI Browser
Comet Browser Flaw targets Comet Browser
WannaCry targets Perplexity
WannaCry targets SquareX
Comet targets Perplexity
Comet targets SquareX
WannaCry related to T1557 - Adversary-in-the-Middle
WannaCry related to T1566 - Phishing
WannaCry related to Firefox
WannaCry related to Safari

Community

Browse all →

Tracked Entities in This Story

WannaCry Comet Perplexity SquareX Perplexity.ai Chromium Comet AI Browser Comet Browser Firefox Safari

MCP API in Comet Browser Enables Full Device Control via Extensions

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story