This vulnerability in Google Chrome's DevTools component prior to version 148.0.7778.96 involves insufficient enforcement of navigation policies. An attacker leveraging this flaw can bypass navigation restrictions if they successfully trick a user into installing a malicious Chrome extension. The issue is classified with medium severity by Chromium security. The vulnerability was publicly disclosed on May 6, 2026. Although a vendor advisory URL is provided, explicit patch or remediation details are not included in the input data.

If exploited, this vulnerability could allow a malicious Chrome extension to bypass navigation restrictions imposed by DevTools policies, potentially enabling unauthorized navigation actions within the browser context. This could lead to security policy circumvention but requires user interaction to install the malicious extension. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should update Google Chrome to version 148.0.7778.96 or later once confirmed patched. Until then, avoid installing untrusted Chrome extensions to reduce risk.