BragJack Attack Hijacks AI Assistants in 5 Popular Browsers With Zero Clicks
Researchers disclosed BragJack, a zero-click extension attack hijacking AI assistants in Chrome, Edge, Opera, Comet, and Claude.
Gal Weizman of Forever Security disclosed BragJack, a zero-click technique in which a malicious extension impersonates trusted channels and commands built-in browser AI assistants. Affected products include Chrome with Gemini, Microsoft Edge, Opera Neon, Perplexity Comet, and Claude in Chrome. Google assigned CVE-2026-0628 and Perplexity assigned CVE-2026-55945, each with a $7,000 bounty; Microsoft paid $5,000, Opera $900, and Anthropic $600. Demonstrated impact includes email, local files, history, screenshots, and, in Chrome, microphone or camera access.
- BragJack lets a malicious extension command browser AI agents without user clicks.
- Chrome CVE-2026-0628 and Perplexity Comet CVE-2026-55945 each drew $7,000 bounties.
- Edge, Opera Neon, and Claude in Chrome were also affected with smaller bounties.
- Possible access includes email, files, screenshots, history, microphone, and camera.
- Prompt-Forcing controls the agent prompt flow rather than hiding instructions in content.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-0628 | Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious… | 8.8 | 7% | ||
| CVE-2026-55945 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to… | 4.2 | <1% |
From the original article
3 min read at gbhackers.com
Security researchers have revealed a zero-click attack technique known as BragJack, which could enable a malicious browser extension to hijack built-in AI assistants in popular browsers like Google Chrome, Microsoft Edge, Opera Neon, Perplexity Comet, and Claude in Chrome. The research, published on September 16 by Gal Weizman of Forever Security, describes a common architectural […]
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.