CVE-2026-11026
MediumCVSS 6.5Summary
Inappropriate implementation in Extensions in Google Chrome prior to version 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
Risk Assessment
An attacker could exploit this vulnerability to take control of the user's navigation, potentially leading to data theft or malicious actions.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor installed extensions for potentially malicious applications.
Original NVD description (English source)
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)