As cited
Copy frozen at (site build).
vulnerabilities
Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar
A vulnerability in Claude for Chrome remains unpatched across eight updates, allowing malicious extensions to access sensitive user data including Gmail and Calendar contents. The flaw appears related to ClaudeBleed, a class of vulnerabilities affecting how the extension isolates data from other browser extensions.
Why it matters: Users of Claude for Chrome face exposure of email and calendar data to any malicious extension installed in their browser; organizations should evaluate whether to restrict or disable the extension until a proper fix is released.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar
A vulnerability in Claude for Chrome remains unpatched across eight updates, allowing malicious extensions to access sensitive user data including Gmail and Calendar contents. The flaw appears related to ClaudeBleed, a class of vulnerabilities affecting how the extension isolates data from other browser extensions.
Why it matters: Users of Claude for Chrome face exposure of email and calendar data to any malicious extension installed in their browser; organizations should evaluate whether to restrict or disable the extension until a proper fix is released.
- Source published
- First seen by Cybersecurity Tracker