This vulnerability involves an inappropriate implementation in the Extensions system of Google Chrome versions before 149.0.7827.53. An attacker who persuades a user to install a crafted malicious extension can bypass discretionary access control policies, potentially leading to unauthorized actions within the browser environment. The issue is recognized by Chromium security with a medium severity rating. No CVSS score or detailed technical exploitation methods are provided. The vendor advisory URL is given but does not specify patch availability or remediation details in the input.

The impact is that a malicious Chrome extension could bypass discretionary access controls, potentially allowing unauthorized access or actions within the browser context. This could lead to compromise of user data or browser integrity depending on the extension's capabilities. However, no known exploits in the wild are reported, and the severity is medium as per Chromium security assessment.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should avoid installing untrusted or suspicious Chrome extensions until a fix is confirmed. No official fix or temporary workaround is explicitly stated in the provided data.