Executive Summary
Forever Security showed one ordinary browser extension could take control of AI assistants built into Chrome (Gemini Live), Perplexity Comet, Edge, Opera Neon and the Claude in Chrome extension.
What Happened
Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension. Once the extension was installed, it could access each product's built-in AI with a single click. On Comet, Edge,
Affected Products
- Gemini in Chrome
- Perplexity Comet
- Microsoft Edge
- Opera Neon
- Claude in Chrome
Vulnerability / Attack Technique
Extension hijacking of browser AI assistants
Technical Mechanism
As reported, an installed extension could invoke the built-in AI with a single click.
AI Security Category
LLM06:2025 Excessive Agency
Part of the AI Agent Excessive Agency topic.
Relevant Frameworks
RealGround Analysis
Browser AI agents inherit browser extension risk. RealGround analysis: restrict extensions on browsers with agentic AI.
Recommended Controls
- Allowlist browser extensions
- Update affected browsers
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/09/one-extension-could-hijack-ai.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.