This vulnerability arises from an improper implementation in the Chrome Extensions framework before version 149.0.7827.53. It enables an attacker, through social engineering to install a malicious extension, to bypass the same origin policy, which is a critical security control designed to prevent malicious cross-origin interactions. The issue is acknowledged by Chromium security with a medium severity rating. No direct patch link is provided, but the vendor advisory URL points to a stable channel update likely containing the fix.

If exploited, this vulnerability could allow a malicious extension to circumvent the same origin policy, potentially enabling unauthorized access to data or actions across different web origins within the browser context. This could lead to privacy breaches or unauthorized data manipulation. However, exploitation requires user interaction to install the malicious extension, and no known exploits in the wild have been reported.

Users should update Google Chrome to version 149.0.7827.53 or later, as indicated by the vendor advisory for the stable channel update. This update is expected to contain the fix for this vulnerability. Until updated, users should avoid installing extensions from untrusted sources to reduce risk. Patch status is not explicitly confirmed in the advisory text provided, so users should verify the update details in the official Chrome release notes.