CVE-2026-0628: Chrome Gemini Panel Hijacking Creates a New AI Privilege Escalation Class

Palo Alto Unit 42 disclosed a CVSS 8.8 vulnerability in Chrome's built-in Gemini panel that demonstrates a fundamentally new attack surface. A malicious extension using only basic ad-blocker-level permissions (declarativeNetRequests API) could inject JavaScript into the privileged Gemini side panel, escalating to: camera/microphone access without consent, local file system access, screenshot capture, and phishing via the hijacked panel. The attack required only installing the extension and clicking the Gemini button — zero additional interaction. Patched in Chrome 143.0.7499.192, but the lesson is architectural: embedding AI into browsers creates privilege escalation surfaces that don't exist in traditional browser security models. Unit 42 | The Hacker News