ClaudeBleed: Any Chrome Extension Can Hijack Your Claude AI

Why It Matters

Needs editorial pass.

Evidence

LayerX Security disclosure/blog (May 7 2026, HN Anthropic mentions ~last 24-48h); affects Claude Chrome extension (v1.0.69/1.0.70 partial patch); PoC with zero-perm extension steals Google Drive "Top Secret" files, sends emails, bypasses approvals via DOM manipulation/approval looping, trusts origin not context.

Signal Read

Source Trail

Daily scan: 2026-05-10

• itcpeacademy.orghttps://www.itcpeacademy.org/blog/news-researchers-uncover-claudebleed-flaw-allowing-full-takeover-of-claude-chrome-extension
• layerxsecurity.comhttps://layerxsecurity.com/blog/a-flaw-in-claudes-browser-extension-allows-any-extension-to-hijack-it/