This vulnerability involves an inappropriate implementation in the Cast component of Google Chrome before version 149.0.7827.53. It enables an attacker positioned on the same local network segment to bypass discretionary access control mechanisms by crafting malicious network traffic. The issue is classified by Chromium as low severity. No CVSS score or detailed technical exploitation information is provided. The vendor advisory linked does not explicitly confirm whether a patch or fix has been released.

An attacker on the local network segment could bypass discretionary access controls in the Cast feature of affected Chrome versions. This could potentially allow unauthorized actions related to casting functionality. The impact is considered low severity by the Chromium security team. There are no reports of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Since no explicit patch or fix is stated, users should monitor official Google Chrome release notes and update to version 149.0.7827.53 or later when available to address this issue.