Insufficient Policy Enforcement in Google Chrome on Linux

CVE-2026-106484

What is CVE-2026-106484?

A vulnerability in Google Chrome for Linux prior to version 1.5.0 can be exploited by local attackers through insufficient policy enforcement in the chrome-devtools-mcp component. This weakness allows unauthorized read and write operations via a specially crafted malicious file, posing a significant security risk for users on Linux systems. It is crucial for users to update to the latest version to mitigate potential threats.

References