CVE-2026-17954 is a vulnerability in Google Chrome's MHTML handling that permits policy bypass leading to cross-origin data leakage. This occurs in versions prior to 151.0.7922.72. The vulnerability enables a remote attacker to craft an MHTML page that can bypass security policies and access data from other origins. The Chromium project rates this vulnerability as low severity. No detailed technical or exploitation information is provided in the source data.

The vulnerability allows unauthorized disclosure of cross-origin data, potentially exposing sensitive information accessible via the browser. However, the impact is considered low severity by the Chromium project, indicating limited risk or difficulty in exploitation. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions prior to 151.0.7922.72, updating to version 151.0.7922.72 or later is likely recommended once official patches are released. Monitor official Chromium or Google Chrome security advisories for updates and apply any official fixes promptly.