Product
Claude for Chrome
- First Reported
- Apr 27, 2026
- Latest Reported
- Jul 16, 2026
Reported Context (3)
- A flaw in Anthropic’s Claude for Chrome extension could let a malicious browser extension trigger built-in AI workflows by faking user clicks, potentially abusing Claude’s access to connected services like Gmail, Google Claude for Chrome Flaw Lets Malicious Extensions Trigger AI Workflows
- Claude for Chrome still contains two unresolved issues that let a script-capable browser extension trigger allowlisted tasks for Gmail, Google Docs, and Calendar through a forged click on claude.ai. Researchers Find Two Unfixed Claude for Chrome Flaws Enabling Forged Tasks and Permission Bypass
- Anthropic’s own published numbers: Claude for Chrome is vulnerable to prompt injection at a 23.6% success rate without mitigations and 11.2% with current measures. Analysis Links Claude Browser Bridge, MCP Flaw and Mythos Access Risks
People (4)
MITRE ATT&CK (4)
Vendors (3)
Products (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.