This vulnerability involves insufficient enforcement of content security policies within Google Chrome extensions before version 149.0.7827.53. An attacker who persuades a user to install a malicious extension can exploit this flaw to bypass content security policies, potentially enabling unauthorized actions within the browser context. The issue is classified as low severity by Chromium security. No CVSS score is available. The vendor advisory references a stable channel update for desktop Chrome, indicating that the issue is addressed in version 149.0.7827.53.

If exploited, a malicious Chrome extension could bypass content security policies, potentially allowing actions that are normally restricted by these policies. However, exploitation requires user interaction to install the malicious extension. The Chromium security team rates this vulnerability as low severity, indicating limited impact or difficulty of exploitation.

Users and administrators should update Google Chrome to version 149.0.7827.53 or later, where this vulnerability is fixed. Since the vendor advisory points to a stable channel update, applying the latest official Chrome updates will remediate this issue. No additional mitigation steps are indicated by the vendor advisory.