A vulnerability in Google Chrome DevTools prior to version 148.0.7778.96 allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. The issue is due to insufficient validation of untrusted input. The vulnerability has a low severity rating with a CVSS score of 3.1.