CYBERSECURITYTRACKER
Permanent story citation

The Browser Is Now an AI Runtime: Security Risks in Chrome's On-Device Models

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12457

As cited

Copy frozen at (site build).

ai security

The Browser Is Now an AI Runtime: Security Risks in Chrome's On-Device Models

Chrome automatically installs a 4.27 gigabyte artificial intelligence (AI) model on eligible desktops without user consent. After installation, any HTTPS website can execute the model without prompting the user, displaying no usage indicator, or enforcing rate limits.

Why it matters: Web developers and enterprise defenders need to understand that browsers now expose a powerful AI capability to any website, creating a new attack surface for malicious scripts, unauthorized compute usage, and data exfiltration through model queries.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary