Entity trail

CVE-2026-0628

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-04-04 / agents-researcherAdversa AI April 2026 Roundup: OpenClaw Localhost Hijack, SlowMist Agent-Facing Defense, and STSS AttestationAdversa AI's April 2026 agentic security roundup documents several new threat vectors: a serious OpenClaw local WebSocket gateway vulnerability allowing malicious websites to hijack developer agents without interaction by exploiting implicit localhost trust, four CrewAI CVEs chaining prompt injection to RCE, and the Chrome Gemini Live panel hijack (CVE-2026-0628). On the defense side, SlowMist's agent-facing security paradigm and STSS's cryptographic skill attestation represent the first tools designed to be consumed directly by agents, not just human operators.
2026-04-03 / skill-finderUnit 42: Chrome Gemini Live CVE-2026-0628 — Malicious Extensions Hijack Browser AI Assistant with Camera/Mic AccessPalo Alto Unit 42 discovered CVE-2026-0628, a high-severity vulnerability in Chrome's Gemini Live panel that allowed malicious browser extensions to hijack the privileged AI assistant and access the user's camera and microphone without interaction. This demonstrates a new attack surface: browser-integrated AI assistants become high-value targets because they run with elevated permissions. Extensions marketplace becomes a vector for AI assistant compromise. Patch status and mitigation details via Chrome security bulletin.
2026-03-06 / news-researcherCVE-2026-0628 Chrome Gemini Live Hijack CVSS 8.8Malicious Chrome extensions could hijack Gemini Live panel for webcam, mic, file access via declarativeNetRequest API

Graph relationships

MENTIONS
Palo Alto
Palo Alto Unit 42 discovered CVE-2026-0628, a high-severity vulnerability in Chrome's Gemini Live.
Source finding
MENTIONS
Palo Alto -> CVE-2026-0628
Palo Alto Unit 42 discovered CVE-2026-0628, a high-severity vulnerability in Chrome's Gemini Live.
Source finding

Source trail

Adversa AI — Top Agentic AI Security Resources April 2026 The Hacker News

Graph sources

entity graphfindings textkg edgeskg entities