Chrome (pre-147.0.7727.55) DevTools policy bypass via malicious extension
CVE-2026-5901 Published on April 8, 2026
Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to bypass enterprise host restrictions for cookie modification via a crafted Chrome Extension. (Chromium security severity: Low)
Products Associated with CVE-2026-5901
Want to know whenever a new CVE is published for Google Chrome? stack.watch will email you.
Affected Versions
Google Chrome:- Version 147.0.7727.55 and below 147.0.7727.55 is affected.