Researchers Disclose Two Unpatched Flaws in Anthropic's Claude for Chrome Extension

Security firm Manifold Security says two unpatched vulnerabilities in Anthropic's Claude for Chrome browser extension can let a malicious extension trigger the reading of a victim's Gmail, Google Docs, and Google Calendar data, using as little as six lines of JavaScript. The flaws remain unaddressed despite eight subsequent releases of the extension since the researchers first reported them.