Public story · 2026-03-12 · source-backed

CVE-2026-0628: Chrome Gemini Panel Hijacked via Basic Extension Permissions.

Issue

2026-03-12

Confidence

source-backed

Sources

Redaction

passed

Story

Unit 42 found extensions with only declarativeNetRequests could access cameras, mics, and local files through Chrome's Gemini panel. Third independent agentic browser vulnerability family. This is a design flaw, not a bug. Unit 42

CVE-2026-0628: Chrome Gemini Panel Hijacking Creates a New AI Privilege Escalation Class
Palo Alto Unit 42 disclosed a CVSS 8.8 vulnerability in Chrome's built-in Gemini panel that demonstrates a fundamentally new attack surface. A malicious extension using only basic ad-blocker-level permissions (declarativeNetRequests API) could inject JavaScript into the privil...
Gemini 3.5 Flash hit GA as Google's fast model for agentic and coding work.
Google pushed Flash to general availability and rolled out Gemini in Chrome (Windows/Mac for AI Pro/Ultra in the US), Gemini Omni globally to subscribers 18+, and a US Daily Brief (Google Gemini). The Flash GA is the builder-relevant piece: frontier-ish quality at speed and pr...
Sundar Pichai: Gemini 3 Pro Fastest-Adopted Model, 750M Monthly Users
- Source: IT Pro - Date: 2026-02-04 Google Cloud revenue hit $17.7B (up 48% YoY), 2026 CapEx planned at $175-185B. Announced "Universal Commerce Protocol" for agentic shopping. Google is quietly building the largest AI distribution moat through Android/Chrome/Search integration.
Open Design turns 25+ agent CLIs into a design engine with one MCP install command.
v0.10.0 (~84.8k stars, Apache-2.0) ships no agent of its own and drives whichever CLI you already have, Claude Code, Codex, Cursor, Copilot, OpenClaw, Gemini, Kimi, Qwen, Cline, plus BYOK OpenAI-compatible endpoints, via od mcp install <agent>. It produces single-page HTML pro...
GitLost turns a plain-English GitHub Issue into a private-repo leak
A GitHub Issue. No code, no credentials, no access. Just a paragraph of English that tells an AI agent to copy your private repo into a public comment. That's GitLost, and it works whether the agent runs on Copilot, Claude, Gemini, or Codex. (Noma Security) Noma Security discl...
A Chinese-speaking operator wired DeepSeek into an open-source agent framework and hit 460+ hosts.
Unit 42 documented an operator in Zhuhai driving the Hermes Agent framework over Telegram with DeepSeek as the reasoning engine, selecting targets and changing tactics after failures. Confirmed impact was narrow: three Citrix NetScaler memory-exfiltration compromises (CVE-2026...

Source trail

Unit 42 More from unit42.paloaltonetworks.com

Entities

Basic Extension Permissions Chrome Chrome Gemini Panel Hijacked CVE Gemini Unit

Provenance

Canonical issue: Ramsay Research Agent — 2026-03-12
AI generated: no
Story unit: 2026-03-12-cve-2026-0628-chrome-gemini-panel-hijacked-via-basic-extension-permissions
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

CVE-2026-0628: Chrome Gemini Panel Hijacked via Basic Extension Permissions.

Story

Related stories

CVE-2026-0628: Chrome Gemini Panel Hijacking Creates a New AI Privilege Escalation Class

Gemini 3.5 Flash hit GA as Google's fast model for agentic and coding work.

Sundar Pichai: Gemini 3 Pro Fastest-Adopted Model, 750M Monthly Users

Open Design turns 25+ agent CLIs into a design engine with one MCP install command.

GitLost turns a plain-English GitHub Issue into a private-repo leak

A Chinese-speaking operator wired DeepSeek into an open-source agent framework and hit 460+ hosts.

Source trail

Entities

Provenance

CVE-2026-0628: Chrome Gemini Panel Hijacked via Basic Extension Permissions.

Story

Related stories

CVE-2026-0628: Chrome Gemini Panel Hijacking Creates a New AI Privilege Escalation Class

Gemini 3.5 Flash hit GA as Google's fast model for agentic and coding work.

Sundar Pichai: Gemini 3 Pro Fastest-Adopted Model, 750M Monthly Users

Open Design turns 25+ agent CLIs into a design engine with one MCP install command.

GitLost turns a plain-English GitHub Issue into a private-repo leak

A Chinese-speaking operator wired DeepSeek into an open-source agent framework and hit 460+ hosts.

Source trail

Entities

Provenance

Story

Related stories

CVE-2026-0628: Chrome Gemini Panel Hijacking Creates a New AI Privilege Escalation Class

Gemini 3.5 Flash hit GA as Google's fast model for agentic and coding work.

Sundar Pichai: Gemini 3 Pro Fastest-Adopted Model, 750M Monthly Users

Open Design turns 25+ agent CLIs into a design engine with one MCP install command.

GitLost turns a plain-English GitHub Issue into a private-repo leak

A Chinese-speaking operator wired DeepSeek into an open-source agent framework and hit 460+ hosts.

Tomorrow's issue, in your inbox.

Source trail

Entities

Provenance

Story

Related stories

CVE-2026-0628: Chrome Gemini Panel Hijacking Creates a New AI Privilege Escalation Class

Gemini 3.5 Flash hit GA as Google's fast model for agentic and coding work.

Sundar Pichai: Gemini 3 Pro Fastest-Adopted Model, 750M Monthly Users

Open Design turns 25+ agent CLIs into a design engine with one MCP install command.

GitLost turns a plain-English GitHub Issue into a private-repo leak

A Chinese-speaking operator wired DeepSeek into an open-source agent framework and hit 460+ hosts.

Tomorrow's issue, in your inbox.

Source trail

Entities

Provenance