CVE-2026-93380 is a race condition vulnerability in the FileSystem feature of Google Chrome versions before 153.0.8010.52. An attacker who has already compromised the renderer process can exploit this flaw by leveraging social engineering techniques involving a crafted HTML page to bypass system access restrictions. The Chromium security team has assigned a medium severity rating to this vulnerability. Google has published a stable channel update that includes a fix for this issue.

Successful exploitation allows an attacker with control over the renderer process to bypass system access restrictions, potentially leading to unauthorized access or actions within the affected system. The vulnerability requires prior compromise of the renderer process and social engineering to trigger.

A stable channel update for Google Chrome has been released that addresses this vulnerability. Users and administrators should update Chrome to version 153.0.8010.52 or later to remediate this issue. No additional mitigation steps are indicated by the vendor advisory.