A security vulnerability in the “Claude in Chrome” browser extension enables attackers to hijack the AI assistant. According to the report from May 12, 2026, this flaw allows malicious extensions to silently access and exfiltrate sensitive data from a user’s Gmail, Google Drive, and GitHub accounts. The vulnerability effectively turns the Claude tool into an unauthorized gateway for data theft.

A security vulnerability in the “Claude in Chrome” browser extension enables attackers to hijack the AI assistant. According to the report from May 12, 2026, this flaw allows malicious extensions to silently access and exfiltrate sensitive data from a user’s Gmail, Google Drive, and GitHub accounts. The vulnerability effectively turns the Claude tool into an unauthorized gateway for data theft.