CVE-2026-79154: Missing authorization in Google Chrome

This vulnerability in Google Chrome's DevTools component is due to missing authorization controls before version 152.0.7977.65. An attacker could exploit this by tricking a user into interacting with the UI, thereby gaining access to sensitive information. The CVSS 3.1 score is 6.5, reflecting a network attack vector with low complexity, no privileges required, but requiring user interaction. The impact is confidentiality loss without integrity or availability impact. There are no known exploits in the wild and no explicit vendor patch link provided in the data.

The vulnerability allows an attacker to obtain sensitive information from the DevTools interface by leveraging social engineering to induce user interaction. This results in a confidentiality breach but does not affect integrity or availability. No active exploitation has been reported.

A fixed version is available: Google Chrome 152.0.7977.65 addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the update. No additional vendor advisory details are provided, so check official Google Chrome release notes for confirmation.