CVE-2026-93384 is a server-side request forgery vulnerability in the Omnibox feature of Google Chrome on Android. The flaw allows a remote attacker to bypass system access restrictions by leveraging social engineering techniques to induce the browser to send crafted network requests. This could potentially allow the attacker to interact with internal systems or services that are otherwise inaccessible. The vulnerability affects versions before 153.0.8010.52 and has been addressed in that version.

The vulnerability could allow an attacker to bypass system access restrictions via SSRF, potentially enabling unauthorized access to internal network resources or services. However, exploitation requires social engineering to trick the user into triggering the malicious request. The severity is rated medium, indicating a moderate impact.

Users and administrators should update Google Chrome on Android to version 153.0.8010.52 or later, where this vulnerability is fixed. No additional mitigation is required beyond applying this official update.