URL has been copied successfully!
Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website

Cybersecurity researchers have disclosed a vulnerability in Anthropic’s Claude Google Chrome Extension that could have been exploited to trigger malicious prompts simply by visiting a web page.The flaw “allowed any website to silently inject prompts into that assistant as if the user wrote them,” Koi Security researcher Oren Yomtov said in a report shared with The Hacker News. “No clicks, no

First seen on thehackernews.com

Jump to article: thehackernews.com/2026/03/claude-extension-flaw-enabled-zero.html

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link