Chrome Vulnerability Allowed Extensions to Hijack Gemini Panel
The research revealed a high-severity vulnerability, CVE-2026-0628, in Google Chrome’s integration with Gemini, which enabled malicious extensions to gain access to sensitive user data and device hardware. Palo Alto Networks’ Unit 42


