Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

By info@thehackernews.com (The Hacker News)

Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks aimed at your Gmail, your latest Google Doc and its comments, and your Calendar. Both this and ClaudeBleed need a rogue extension that can already run a script on claude.ai; the difference is scope. Anthropic restricted the arbitrary-prompt path in May as part of its response to the