Claude for Chrome Fails to Verify Event.isTrusted, Risking Synthetic Click Exploits
Inevitable_Fee1895 · reddit · 2026-08-02
Security firm Manifold Security discovered that the Claude for Chrome extension does not verify the browser's Event.isTrusted property before executing workflows for Gmail, Calendar, and other services.
This means a malicious extension with script access could synthesize a fake click event to trigger Claude's workflows without genuine user intent. While Claude defaults to a confirmation prompt for sensitive actions, this safeguard is bypassed if users enable the "Act without asking" feature.
Reported to Anthropic in May, the issue remained reproducible in July's v1.0.80. The author notes this highlights an architectural challenge in browser isolation and trust boundaries, prompting a discussion on best practices for building secure browser agents.
More from coding & agent
- ERP•AI launches headless SaaS with $0 seats that bills machines: $1 buys 4,000 record writes — rohanpaul_ai · 2026-10-16
- FDE-Gym benchmark shows huge gap on real AI delivery tasks: top model scores 0.563 — DeepLethe · 2026-10-16
- Vibe-coded dashboard leaked franchise financials before anyone logged in — shauntrennery · 2026-10-16
- Fintech HR built a sourcing agent on 60,000 past applicants — 30 qualified candidates in a month — G0NZ0BOY · 2026-10-16
- Orchestrating a 100-image portrait of humanity for aliens with ChatGPT, Argon and p5.brush — dx8xb · 2026-10-16
- 3x DGX Spark cluster runs GLM-5.3-Flash locally behind a proxy, 1.75M tokens/day at 119W — Teknium · 2026-10-16