Hover Summary Feature Vulnerability in Summarize by Steipete

CVE-2026-45245

What is CVE-2026-45245?

The Summarize extension for browsers prior to version 0.15.1 contains a vulnerability in its hover summary feature. This flaw allows malicious pages to generate synthetic mouseover events over links that are controlled by the attacker. Consequently, the extension may execute authenticated daemon requests using stored user tokens without verifying the authenticity of the event. This can lead to the unintended exposure of sensitive internal endpoints, as attackers can manipulate local or private-network URLs through hoverable links, thus leveraging user interactions with deceptive content.

References