A high-severity flaw in Google Chrome’s Gemini Live integration, tracked as CVE-2026-0628, puts users’ privacy at risk.
Malicious browser extensions could hijack the Gemini side panel to spy on cameras, microphones, and local files without permission.
The Flaw in AI Browser Integration
Chrome’s Gemini Live feature acts as an “agentic browser” AI assistant. It runs in a side panel, summarizing web content in real time and handling tasks like automated actions.
This requires deep access to the user’s environment, including media devices and files.
Researchers at Palo Alto Networks Unit 42 discovered the issue. The Gemini web app (gemini.google.com/app) loads differently in the side panel than in a regular tab.
Chrome gives the panel elevated privileges for AI tasks, widening the attack surface beyond traditional browser protections.
Malicious extensions exploit this via the declarativeNetRequests API, which lets them intercept and modify HTTPS requests, a capability common in ad blockers.
JavaScript injection works harmlessly in tabs but hijacks privileges in the panel.
| CVE ID | Severity | Affected Component | Exploit Mechanism | Impact | Status |
|---|---|---|---|---|---|
| CVE-2026-0628 | High | Google Chrome Gemini Live Panel | JavaScript injection via declarativeNetRequests API | Unauthorized access to camera, mic, files, and screenshots | Patched (Jan 2026) |
An attacker installs a rogue extension. When the user opens the Gemini panel, the extension intercepts the app’s load.
It injects code that steals the panel’s powers: turning on the camera or mic silently, reading local files, snapping screenshots of any HTTPS site, or mimicking phishing via the trusted interface.
No extra clicks needed, just opening the panel triggers it. This bypasses Chrome’s sandboxing, as the panel runs with special rights for multimodal AI (seeing and hearing like the user).
Unit 42 demoed this in controlled tests, showing real-world risks for enterprises and individuals.
Impacts hit hard:
- Silent surveillance via camera/mic.
- File theft from desktops.
- Screenshots of sensitive sites.
- AI-powered phishing in a legit-looking panel.
Unit 42 disclosed responsibly in October 2025. Google patched it in January 2026 via Chrome updates. Users should update immediately (chrome://settings/help) and remove suspicious extensions.
Agentic browsers like Gemini Live redefine threats. Privileged AI needs tighter controls, like better extension scoping and request auditing. Watch for similar flaws in rivals like Microsoft’s Copilot.
Stay vigilant: Update browsers, vet extensions, and monitor side panels. As AI embeds deeper, traditional models like OWASP Top 10 for LLMs must evolve.
Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google.
%20(1).webp?fit=1600,900&ssl=1&description=Malicious browser extensions could hijack the Gemini side panel to spy on cameras, microphones, and local files without permission.){kind=link}