This vulnerability arises from insufficient validation of untrusted input within the Permissions feature of Google Chrome versions before 148.0.7778.96. An attacker positioned on the same local network segment could exploit this flaw to leak cross-origin data by crafting malicious network traffic. The issue was publicly disclosed on May 6, 2026, and is rated medium severity by Chromium security. Although no explicit patch or remediation level is mentioned in the CVE data, the vendor advisory points to a stable channel update likely containing the fix.

The impact is limited to information disclosure through cross-origin data leakage. An attacker on the local network segment could exploit this vulnerability to access data that should be isolated by origin policies. There are no known exploits in the wild at this time.

A fix is available in Google Chrome version 148.0.7778.96 or later, as indicated by the vendor's stable channel update advisory. Users and administrators should update to this or a later version to remediate the vulnerability. Patch status is confirmed by the vendor advisory linked. No additional mitigation steps are specified.