This vulnerability involves a policy bypass in Google Chrome's LocalNetworkAccess component before version 147.0.7727.55. An attacker can exploit this by crafting a malicious HTML page that bypasses navigation restrictions intended to limit access to local network resources. The issue was publicly disclosed on April 8, 2026, and is categorized with medium severity by Chromium security. No CVSS score or detailed remediation status is provided in the available data. The vendor advisory link points to a stable channel update announcement but does not explicitly confirm if this update addresses the vulnerability.

The impact of this vulnerability is that an attacker can bypass navigation restrictions in Chrome's LocalNetworkAccess, potentially allowing unauthorized access to local network resources or navigation flows that should be restricted. There is no evidence of known exploits in the wild. The severity is considered medium by Chromium security, indicating a moderate risk but not critical or high.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to the latest stable version of Google Chrome when available. Until confirmation of a fix, exercising caution with untrusted HTML content that could exploit navigation policies is advised.