CVE-2026-17903 describes a security vulnerability in the Chromecast component of Google Chrome before version 151.0.7922.72. The vulnerability arises from insufficient policy enforcement, which enables an attacker located on the same local network segment to inject malicious scripts or HTML content into a privileged page via crafted network traffic. This could potentially lead to unauthorized content injection but is rated as low severity by the Chromium security team. There is no CVSS score available and no known exploits reported. The vulnerability is not related to a cloud service, and no vendor advisory or patch information is provided in the input data.

An attacker on the local network segment can inject scripts or HTML into privileged pages within the affected Chrome browser's Chromecast functionality. This could allow limited unauthorized content injection, potentially affecting the integrity of displayed content or user interface elements. The Chromium security team rates this vulnerability as low severity, indicating limited impact or exploitability. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability affects Google Chrome versions prior to 151.0.7922.72, so updating to version 151.0.7922.72 or later is recommended once official patches are confirmed. Until then, limiting exposure to untrusted local network segments may reduce risk.