---
title: "Chrome flaw let extensions hijack Gemini’s camera, mic, and file access"
url: https://daily.dev/posts/chrome-flaw-let-extensions-hijack-gemini-s-camera-mic-and-file-access-dyoweciui
source_url: https://securityboulevard.com/2026/03/chrome-flaw-let-extensions-hijack-geminis-camera-mic-and-file-access/
type: article
source: "Security Boulevard"
published: 2026-03-03T13:34:24.470Z
updated: 2026-03-15T03:32:42.537Z
tags: ["devtools", "google-chrome", "google-gemini", "vulnerability"]
reading_time: 3
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Chrome flaw let extensions hijack Gemini’s camera, mic, and file access

**[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 3 min read · 0 upvotes · 0 comments

## Summary

A high-severity vulnerability (CVE-2026-0628) in Chrome's Gemini 'Live in Chrome' side panel allowed a low-privilege browser extension to inject JavaScript into the privileged AI panel and inherit its capabilities, including camera/microphone access, local file enumeration, screenshots, and the ability to turn the panel into a phishing UI. The flaw exploited the declarativeNetRequest API to tamper with traffic to gemini.google.com when loaded in the side panel. Google patched the issue in a January 2026 update. The broader concern is that agentic AI browsers (Gemini in Chrome, Copilot in Edge, etc.) require broad permissions that make them attractive attack targets, breaking traditional browser isolation boundaries.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://securityboulevard.com/2026/03/chrome-flaw-let-extensions-hijack-geminis-camera-mic-and-file-access/>

## Similar posts on daily.dev

- [Taming Agentic Browsers: Vulnerability in Chrome Allowed Extensions to Hijack New Gemini Panel](https://daily.dev/posts/taming-agentic-browsers-vulnerability-in-chrome-allowed-extensions-to-hijack-new-gemini-panel-wrgfp6s8g) · Unit 42 · 0 upvotes · 0 comments

---

Tags: [#devtools](https://daily.dev/tags/devtools), [#google-chrome](https://daily.dev/tags/google-chrome), [#google-gemini](https://daily.dev/tags/google-gemini), [#vulnerability](https://daily.dev/tags/vulnerability)

[View this post on daily.dev](https://daily.dev/posts/chrome-flaw-let-extensions-hijack-gemini-s-camera-mic-and-file-access-dyoweciui)