This vulnerability arises from insufficient validation of untrusted input within the DevTools feature of Google Chrome versions before 149.0.7827.53. An attacker who persuades a user to install a crafted malicious extension could exploit this flaw to bypass navigation restrictions imposed by Chrome. The issue is classified under CWE-20 (Improper Input Validation). The CVSS v3.1 base score is 6.5, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction needed, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

Successful exploitation allows bypassing navigation restrictions in Chrome via a malicious extension, potentially leading to unauthorized actions or manipulation within the browser context. There is no direct confidentiality or availability impact reported. The integrity of browser navigation can be compromised.

The vulnerability affects Chrome versions prior to 149.0.7827.53. Users and administrators should update to version 149.0.7827.53 or later where this issue is addressed. The vendor advisory linked should be consulted for the latest remediation status. Since no explicit patch confirmation is provided in the advisory, verify the update includes this fix. Avoid installing untrusted or suspicious Chrome extensions to reduce risk.