<![CDATA[BragJack attacks hijack AI browser agents through malicious extensions]]>A new proof-of-concept attack dubbed BragJack demonstrates how a single malicious browser extension can hijack the AI assistants built into several popular browsers. The research comes from Gal Weizman of Forever Security, and targets Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome.

The attack relies on a technique called Prompt Forcing, which manipulates the AI agent into following attacker-controlled instructions rather than the user's intent. According to the report, the findings earned more than $20,000 in bug bounties and resulted in two CVE assignments.

Affected browsers and integrations named in the research:

  • Chrome
  • Edge
  • Opera Neon
  • Perplexity Comet
  • Claude in Chrome

The core concern for defenders is that the extension does not need to exploit separate flaws in each browser; one malicious extension is enough to compromise the AI assistant across all listed targets. This highlights the trust placed in browser extensions that interact with AI agents, and the potential for prompt-based manipulation to override intended safeguards.

Source: BleepingComputer

Does your organization restrict or audit browser extensions that can interact with AI assistants?

]]>https://xploitlk.com/topic/392/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensionsRSS for NodeTue, 27 Oct 2026 08:56:24 GMTSat, 19 Sep 2026 16:30:20 GMT60