Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass… (CVE-2026-106385)

CVE-2026-106385 describes a race condition in the Chromoting feature of Google Chrome before version 155.0.8059.39. Exploitation requires social engineering to trick a user and involves sending crafted network traffic to bypass system access restrictions. The vulnerability is classified under CWE-362 (Race Condition) and has a CVSS 3.1 base score of 5.3, indicating medium severity. There is no information provided about an available patch or official fix.

Successful exploitation could allow an attacker to bypass system access restrictions remotely by leveraging social engineering and crafted network traffic. The impact is limited to integrity as indicated by the CVSS vector (I:H), with no confidentiality or availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor official Google Chrome security advisories for updates. Until a fix is available, caution against social engineering attempts and suspicious network traffic related to Chromoting is advised.