CVE-2026-5901

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55

Description A flaw exists in the Google Chrome DevTools web development toolkit's data protection mechanism. Successful exploitation could allow a remote attacker to bypass security restrictions by loading a malicious extension. This could occur if a user is convinced to install a malicious extension. Insufficient policy enforcement in DevTools allowed bypassing enterprise host restrictions for cookie modification via a crafted Chrome Extension.

Recommendations Update Google Chrome to version 147.0.7727.55 or later.