CVE-2026-17925 describes a security flaw in the Cast implementation of Google Chrome on Android versions before 151.0.7922.72. This flaw enables a remote attacker to bypass the same origin policy by using a crafted HTML page. The vulnerability is categorized under CWE-346 (Origin Validation Error). There is no explicit vendor advisory stating a patch or remediation level, but the affected versions are prior to 151.0.7922.72, implying that updating to this version or later addresses the issue.

The vulnerability allows a remote attacker to bypass the same origin policy, potentially enabling unauthorized interactions between different web origins. However, the Chromium security severity is low, and the CVSS score is 4.3, indicating limited impact. There is no indication of confidentiality or availability impact, only integrity impact with user interaction required.

Users should update Google Chrome on Android to version 151.0.7922.72 or later to remediate this vulnerability. Since this is a client-side application vulnerability, updating the browser to the fixed version is the recommended action. Patch status is inferred from the affected version information and vendor advisory URL, which references the stable channel update including this fix.