A hidden MCP API in Comet let extensions execute local commands on user devices.
First seen on esecurityplanet.com
Jump to article: www.esecurityplanet.com/artificial-intelligence/hidden-comet-browser-api-allowed-dangerous-local-command-execution/
![]()
A hidden MCP API in Comet let extensions execute local commands on user devices.
First seen on esecurityplanet.com
Jump to article: www.esecurityplanet.com/artificial-intelligence/hidden-comet-browser-api-allowed-dangerous-local-command-execution/
![]()