Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

Summary

Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks aimed at your Gmail, your latest Google Doc and its comments, and your Calendar. Both this and ClaudeBleed need a rogue extension that can already run a script on claude.ai; the difference is scope. Anthropic restricted the arbitrary-prompt path in May as part of its response to the 

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.