- What: A flaw in the Claude Chrome extension allows malicious extensions to trigger AI actions
- Impact: Could lead to unauthorized access to connected services
A flaw in Anthropic's Claude for Chrome browser extension could allow a malicious extension to trigger predefined AI actions by simulating user clicks, potentially allowing it to abuse Claude's access to connected services such as Gmail, Google Docs, Google Calendar, and Salesforce. [...]