CVE-2026-13876 is a medium severity vulnerability in Google Chrome's Network implementation that affects versions before 150.0.7871.47. It enables an attacker with a privileged network position to bypass the browser's content security policy by injecting malicious network traffic. This could potentially allow unauthorized script execution or content injection despite the intended security controls. The vulnerability is tracked under CWE-693 (Protection Mechanism Failure).

An attacker positioned within the network path can bypass Chrome's content security policy, potentially leading to unauthorized content injection or script execution. This undermines the browser's security model designed to restrict content sources and protect users from malicious web content. There is no indication of confidentiality or availability impact, and no known exploits in the wild have been reported.

Users should update Google Chrome to version 150.0.7871.47 or later, where this vulnerability is fixed. The vendor advisory linked confirms the availability of this update. No additional mitigations are specified or required once the update is applied.