vibegraveyard.ai • 2h
ShadowPrompt: Zero-Click Prompt Injection in Anthropic Claude for Chrome
This vulnerability chain enabled remote attackers to execute zero-click prompt injections against the Claude for Chrome extension by exploiting a permissive origin allowlist (*.claude.ai) and a DOM-based XSS in an Arkose Labs CAPTCHA component hosted on a-cdn.claude.ai. By bypassing origin checks via the trusted subdomain, attackers could send unauthorized messages to the extension's background script, facilitating the theft of Gmail access tokens, Google Drive data exfiltration, and unauthorized account manipulation for over 3 million users.
Links:vibegraveyard.ai, DEV Community, news.ycombinator.com, Thehackernews, Koi, Penligent, Arxiv, Socradar, Forbes, Genai, Youtube, Ibm, Github, Blog, Letsdatascience, Paddo, Graphistry, Slashdot, Reddit, Libhunt, microsoft.com, Substack, News, Paubox, Mishcon, Malwarebytes •