This vulnerability in Google Chrome affects versions before 149.0.7827.53 and stems from insufficient validation of untrusted input within DevTools. An attacker leveraging this flaw could bypass navigation restrictions by tricking a user into installing a crafted malicious Chrome extension. The issue is recognized by Chromium security with a medium severity rating. No known exploits in the wild have been reported. The vendor advisory linked does not specify whether a patch has been released or if any temporary mitigations exist.

If exploited, this vulnerability could allow a malicious Chrome extension to bypass navigation restrictions, potentially enabling unauthorized navigation actions within the browser environment. This could lead to security policy circumvention but requires user interaction in the form of installing a malicious extension. No evidence of active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official fixes are confirmed, users should avoid installing untrusted Chrome extensions and follow standard security best practices regarding extension permissions.