--- title: Claude Chrome extension flaw lets malicious extensions... description: A security flaw in Anthropic's Claude for Chrome browser extension allows malicious extensions to trigger predefined AI workflows by simulating user clicks... canonical: https://daily.dev/posts/claude-chrome-extension-flaw-lets-malicious-extensions-trigger-ai-actions-wh8xi7zti twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Claude Chrome extension flaw lets malicious extensions trigger AI actions | daily.dev og:description: A security flaw in Anthropic's Claude for Chrome browser extension allows malicious extensions to trigger predefined AI workflows by simulating user clicks... og:url: https://daily.dev/posts/claude-chrome-extension-flaw-lets-malicious-extensions-trigger-ai-actions-wh8xi7zti og:image: https://api.daily.dev/og/posts/WH8xI7zTI.png og:image:alt: Claude Chrome extension flaw lets malicious extensions trigger AI actions og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Claude Chrome extension flaw lets malicious extensions trigger AI actions **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 4 min read · 0 upvotes · 0 comments ## Summary A security flaw in Anthropic's Claude for Chrome browser extension allows malicious extensions to trigger predefined AI workflows by simulating user clicks without proper trust verification. The extension fails to check the browser's Event.isTrusted property, meaning a malicious extension with access to the claude.ai domain can inject synthetic click events to execute workflows that interact with Gmail, Google Docs, Google Calendar, and Salesforce. The attack is limited to nine predefined tasks and requires a user to install a malicious extension. Researchers from Manifold Security reported both this flaw and a secondary skipPermissions=true bypass to Anthropic via bug bounty, but both remain unpatched in the latest extension version 1.0.80 as of July 7. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Claude in Chrome is taking orders from the wrong extensions](https://daily.dev/posts/claude-in-chrome-is-taking-orders-from-the-wrong-extensions-fxzui5dan) · CSO Online · 1 upvotes · 0 comments - [Claude in Chrome is generally available](https://daily.dev/posts/claude-in-chrome-is-generally-available-kcapwjtof) · Claude · 21 upvotes · 5 comments - [Claude Flaw Automatically Sends Malicious Prompts to AI Agents](https://daily.dev/posts/claude-flaw-automatically-sends-malicious-prompts-to-ai-agents-x10wwitxh) · Dark Reading · 2 upvotes · 1 comments --- Tags: [#devtools](https://daily.dev/tags/devtools), [#vulnerability](https://daily.dev/tags/vulnerability), [#claude](https://daily.dev/tags/claude), [#anthropic](https://daily.dev/tags/anthropic) [View this post on daily.dev](https://daily.dev/posts/claude-chrome-extension-flaw-lets-malicious-extensions-trigger-ai-actions-wh8xi7zti) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Claude Chrome extension flaw lets malicious extensions trigger AI actions","url":"https://daily.dev/posts/claude-chrome-extension-flaw-lets-malicious-extensions-trigger-ai-actions-wh8xi7zti","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/claude-chrome-extension-flaw-lets-malicious-extensions-trigger-ai-actions-wh8xi7zti"},"datePublished":"2026-07-17T00:17:29.917Z","dateModified":"2026-07-20T07:30:50.028Z","description":"A security flaw in Anthropic's Claude for Chrome browser extension allows malicious extensions to trigger predefined AI workflows by simulating user clicks...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e9b87affb4730dc1f0877a07f078c693?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e9b87affb4730dc1f0877a07f078c693?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/claude-chrome-extension-flaw-lets-malicious-extensions-trigger-ai-actions-wh8xi7zti","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"devtools,vulnerability,claude,anthropic","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Claude Chrome extension flaw lets malicious extensions trigger AI actions"}]} ```