About IANS
<h3></h3><h4 spellcheck="false" data-placeholder="Type a title" data-sf-tooltip="input-title" class="ians-heading-4">Unpatched Claude for Chrome Flaw Could Give Attackers Access to Gmail, Calendar</h4><p> </p><p>July 20, 2026</p><p></p><p>Researchers at AI security firm Manifold <a data-sf-ec-immutable="" rel="noopener noreferrer" href="https://www.manifold.security/blog/claude-for-chrome-extension-bypass" target="_blank">identified</a> two unpatched vulnerabilities that are exploitable in Claude for Chrome, Anthropic’s agentic browser extension.</p><p>Manifold researchers stated that the flaws could allow a malicious browser extension to trigger Claude into taking actions without user approval. Then, an attacker could exploit the flaws to read victims’ Gmail messages, Google Docs documents, and calendar data.<br></p><div></div>
