“ClaudeBleed” allows any Chrome extension to control Anthropic’s AI assistant

A critical flaw in Anthropic’s “Claude in Chrome” browser extension allows any Chrome extension, even one with zero permissions, to hijack Claude’s AI capabilities and perform sensitive actions on behalf of users. The issue, discovered by LayerX and dubbed “ClaudeBleed,” could enable attackers to steal emails, access private GitHub repositories, exfiltrate Google Drive files, and … The post “ClaudeBleed” allows any Chrome extension to control Anthropic’s AI assistant appeared first on CyberInsider.