‘The bypass is still six lines of JavaScript’: Security experts warn that Claude for Chrome browser extension could be hijacked, despite it alerting Anthropic several times that something was wrong

安全研究公司 Manifold Security 发现 Anthropic 的 Claude for Chrome 浏览器扩展存在两个未修补漏洞,攻击者可利用合成点击触发敏感 AI 工作流;研究人员早在 2026 年 5 月就向 Anthropic 报告,但修复未在八次版本更新中被彻底落实。








