This vulnerability concerns an inappropriate implementation in the Chromoting feature of Google Chrome versions before 148.0.7778.168. It enables a local attacker to bypass discretionary access control mechanisms by leveraging a malicious file, potentially allowing unauthorized access or actions within the affected system. The issue is classified with medium severity by Chromium security. No CVSS score or detailed technical exploitation information is provided. The vendor advisory is available but does not explicitly state patch or remediation details.

The impact is a local privilege escalation or unauthorized access due to bypassing discretionary access control in the Chromoting component of Google Chrome. This could allow a local attacker to perform actions or access resources that would normally be restricted. No evidence of exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for current remediation guidance. Until confirmation of a fix, users should avoid running untrusted local files that might exploit this vulnerability. No official fix or temporary workaround is explicitly stated in the provided data.