CVE-2026-13025 is a race condition vulnerability in the DevTools of Google Chrome before version 149.0.7827.197. It allows a remote attacker, with control over the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This could lead to full compromise of the browser sandbox environment. The vulnerability has a CVSS v3.1 score of 8.3, indicating high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at the time of publication.

Successful exploitation could allow an attacker who has already compromised the renderer process to escape the sandbox, potentially gaining higher privileges and executing arbitrary code outside the browser sandbox. This elevates the risk of system compromise beyond the browser context.

The vendor advisory URL indicates a stable channel update for desktop Chrome, implying that a fix is available in version 149.0.7827.197. Users should update to this version or later to remediate the vulnerability. Patch status is not explicitly stated in the input data, so users should verify the vendor advisory for confirmation and apply the update promptly.