CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

September 16, 2026

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude Swati KhandelwalSep 16, 2026Vulnerability / Browser Security Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension. Once the extension was installed, it could access each product's built-in AI with a single click. On Comet, Edge, Opera Neon, and Claude in Chrome, it could drive the AI agent to act on behalf of the attacker; on Chrome and Comet, it could read files from the user's computer, and on Chrome, it could also switch on the…

CVEs: CVE-2026-0628, CVE-2026-55945