New bugs in Claude for Chrome allow extensions to abuse AI privileges

Two vulnerabilities found in Anthropic’s Claude for Chrome extension remain exploitable months after they were reported to the company, a research by Manifold Security noted. According to the researchers, the flaws can allow a malicious browser extension to trigger Claude into performing privileged actions, including reading Gmail messages, Google Docs content, and Calendar entries on behalf of a user. In a new blog post, the researchers said the issues are reproducible in Claude for Chrome vers