Researchers at Forever Security demonstrated that a single ordinary browser extension could take control of AI assistants built into Chrome (Gemini Live), Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension, gaining access with a single click.
Disclosed 16 September 2026 · Record updated 16 September 2026
A malicious browser extension could hijack the built-in AI assistants of five major Chromium-based browsers, gaining control with a single click.
VulnerabilitiesForever Security researchers say a single ordinary extension gained one-click control of built-in AI assistants across Chrome, Comet, Edge, Opera Neon and Claude in Chrome.
16 Sept 2026
