Missing Authorization Vulnerability in Summarize Browser Extension by Steipete

CVE-2026-45244

What is CVE-2026-45244?

The Summarize browser extension by Steipete has a missing authorization vulnerability, allowing attackers to execute automation actions without user consent when the extension's automation feature is active. This vulnerability can be exploited if an attacker lures a user into engaging with malicious content, hence enabling unauthorized actions such as navigation or other automation processes. The affected versions prior to 0.15.1 fail to properly verify user approval, creating a critical security flaw that could lead to unauthorized manipulation of browser behavior.

References