MalwarePublished 19 Sep 2026

BragJack attacks hijack AI browser agents through malicious extensions

Source Bleeping Computer

Description

BragJack is a proof-of-concept attack that hijacks AI assistants in multiple browsers including Chrome, Edge, Opera Neon, and AI platforms like Perplexity Comet and Claude via a single malicious browser extension. It uses a technique called Prompt Forcing to manipulate AI agents. The attack has earned significant bug bounty rewards and resulted in two CVEs. No specific affected software versions or patch information is provided.

Impact

The attack enables an adversary to hijack AI assistants in multiple browsers and AI platforms through a malicious extension, potentially allowing manipulation of AI responses or actions. The exact impact scope and exploitation details are not provided. There is no indication of active exploitation in the wild.

Defensive guidance

Users should be cautious about installing browser extensions and monitor official advisories from affected browser and AI platform vendors for updates or fixes.

Summary

BragJack is a demonstrated attack leveraging a malicious browser extension to hijack AI assistants embedded in popular browsers and AI platforms. The attack exploits the Prompt Forcing technique to manipulate AI behavior, affecting Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome. It is a proof-of-concept with recognized security impact, as evidenced by bug bounty awards and CVEs assigned.

References

bleepingcomputer.com/news/security/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensions/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 19 Sep 2026, 15:01 UTC

References

Community reviews