BREAKING
Claude for Chrome Flaw Hits Gmail
How the Attack Works
1
Rogue extension loads
↓
2
Injects claude.ai script
↓
3
Sends arbitrary prompt
↓
4
Reads Gmail & Docs
Origin Check Is Not Enough
0
Patched in v1.0.70
0
+
Later releases affected
0
Still open in v1.0.80
Mitigations vs Bypasses
Anthropic Defenses
IN PLACE
●
Safety classifiers
●
Confirmation prompts
●
Site blocklists
Known Bypasses
RISK
●
Approval looping
●
DOM manipulation
●
Act without asking
Limit Silent Execution
AI NEWS BLITZ
An unpatched flaw in Claude for Chrome lets rogue extensions reach your Gmail and Docs.