This vulnerability in Google Chrome's FileSystem component allows an attacker with control over the renderer process to bypass authorization and obtain cross-origin data. The issue affects versions prior to 153.0.8010.36. The flaw arises from missing authorization checks, enabling unauthorized data access across origins. The vulnerability is classified as medium severity by Chromium security. No known exploits in the wild have been reported. The vendor advisory URL is provided but does not explicitly confirm patch status in the input data.

An attacker who has already compromised the renderer process can leverage this vulnerability to access data from other origins, potentially exposing sensitive information that should be isolated by the browser's same-origin policy. This could lead to privacy breaches or data leakage within the browser context.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html for current remediation guidance. Users and administrators should monitor this advisory for updates and apply any official fixes once available. Until then, limiting exposure to untrusted content and ensuring renderer process integrity may reduce risk.