This vulnerability arises from insufficient policy enforcement within the DevTools component of Google Chrome versions before 148.0.7778.96. It enables a remote attacker to potentially perform a sandbox escape by leveraging malicious network traffic. The vulnerability is tracked as CWE-693 and carries a high CVSS score of 8.1, indicating significant confidentiality, integrity, and availability impacts if exploited. The vendor advisory is available but does not specify remediation details or patch availability.

Successful exploitation could lead to a sandbox escape, allowing an attacker to break out of the browser's restricted environment. This could result in full compromise of the affected system's confidentiality, integrity, and availability. However, no known exploits have been observed in the wild so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted network traffic and consider limiting exposure to potentially malicious sites. No vendor-provided mitigation or temporary fix is currently documented.