Researchers identify high-severity Chrome vulnerability CVE-2026-0628 that allowed malicious extensions to hijack the Gemini Live AI assistant. The flaw, now patched in Chrome 143, granted unauthorized access to local files, camera, and microphone.

Researchers at Palo Alto Networks identified a high-severity vulnerability, CVE-2026-0628, in Google Chrome that allowed malicious extensions to hijack the Gemini Live AI assistant. The flaw, which has been patched in Chrome 143, could have permitted unauthorized access to local files, camera, microphone, and browser data.