A vulnerability in Google Chrome prior to version 148.0.7778.96 involves insufficient validation of untrusted input in the Permissions component. This flaw allows an attacker on the local network segment to leak cross-origin data through malicious network traffic. The issue is rated as medium severity with a CVSS score of 4.3.