This vulnerability in Google Chrome's DevTools component arises from insufficient validation of untrusted input. Specifically, it allows a remote attacker to bypass navigation restrictions by crafting a malicious HTML page. The issue affects versions prior to 151.0.7922.72. The CVSS 3.1 base score is 4.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation details in the input data.

An attacker can bypass navigation restrictions in Chrome DevTools by exploiting insufficient input validation. This could potentially allow limited unauthorized actions related to navigation control within the DevTools environment. There is no impact on confidentiality or availability, and the integrity impact is limited. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users should update to Chrome version 151.0.7922.72 or later once confirmed. Until then, exercise caution when interacting with untrusted HTML content in DevTools.