CVE-2026-17952 is a vulnerability in the V8 engine of Google Chrome before version 151.0.7922.72. It permits an attacker, through social engineering to get a user to install a crafted malicious Chrome extension, to execute arbitrary code within the sandbox environment. This vulnerability arises from an inappropriate implementation in V8, but exploitation requires user consent to install the extension. The Chromium security team has classified this vulnerability as low severity, indicating limited impact or difficulty in exploitation.

An attacker who successfully convinces a user to install a malicious Chrome extension can execute arbitrary code inside the sandboxed environment of the browser. This could potentially lead to unauthorized actions within the browser context but is limited by sandbox restrictions. There are no known exploits in the wild at this time.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update to this version or a later one to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the browser update. No additional mitigation steps are indicated by the vendor advisory.