The vulnerability CVE-2026-17825 concerns insufficient policy enforcement in the Passwords feature of Google Chrome on Android devices. An attacker can exploit this weakness by crafting a malicious HTML page that bypasses discretionary access control mechanisms. This could potentially allow unauthorized actions related to password management. The CVSS score is 6.5 (medium severity) with an attack vector of network, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The affected versions are those prior to 151.0.7922.72.

The impact is a potential bypass of discretionary access control in the Passwords component of Chrome on Android, which could lead to unauthorized modification or interference with password data integrity. There is no reported confidentiality or availability impact. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The provided vendor advisory link should be monitored for updates. Until a fix is confirmed, users should exercise caution when interacting with untrusted web content on affected Chrome versions.