Claude Chrome extension vulnerability enables unauthorized AI action execution

A security flaw in the Claude for Chrome extension allows malicious third-party extensions to simulate user interactions, potentially granting unauthorized access to integrated services like Gmail, Google Docs, and Salesforce. The vulnerability highlights risks in browser-based AI integrations where cross-extension communication can bypass intended user-consent workflows.