CVE-2026-11170 is a vulnerability in Google Chrome's Chromoting feature on Linux platforms before version 149.0.7827.53. It involves an inappropriate implementation that enables a remote attacker to perform OS-level privilege escalation through crafted network traffic. The CVSS v3.1 score is 8.1, reflecting high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vendor advisory linked does not explicitly confirm patch availability or remediation level, and no direct patch links are provided.

Successful exploitation of this vulnerability could allow a remote attacker to escalate privileges on the affected Linux system, potentially gaining unauthorized control over the operating system. This impacts confidentiality, integrity, and availability of the system. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should consider limiting exposure of Chromoting services and monitor for updates from Google. No explicit temporary mitigations or workarounds are provided in the available data.