Fetching from the wire…
Public story · 2026-03-12 · source-backed
Unit 42 found extensions with only declarativeNetRequests could access cameras, mics, and local files through Chrome's Gemini panel. Third independent agentic browser vulnerability family. This is a design flaw, not a bug. Unit 42
Each link below shares sources, entities, or timing with this story.
Gemini uses Chrome / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Gemini uses Chrome); both cover Chrome, CVE, Gemini, Unit; cite the same source (Unit 42).
Gemini built by Google / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Gemini built by Google); both cover Chrome, Gemini; overlapping topics (agentic, chrome, gemini).
Gemini built by Google / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Gemini built by Google); both cover Chrome, Gemini; overlapping topics (agentic, chrome, gemini).
Codex competes with Gemini / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Codex competes with Gemini); both cover Chrome, Gemini; overlapping topics (chrome, design).
Linked by a graph relationship (Codex competes with Gemini); both cover CVE, Gemini; overlapping topics (access, agentic).
Claude Code benchmarked against Gemini / Shared entities / Same source domain / What happened next
Linked by a graph relationship (Claude Code benchmarked against Gemini); both cover CVE, Unit; reported by the same outlet (unit42.paloaltonetworks.com).
Gemini built by Google / Shared entities / What happened next / Tension
Linked by a graph relationship (Gemini built by Google); both cover Chrome, Gemini; picks up the Chrome thread on 2026-07-31.
Claude Code benchmarked against Gemini / Shared entities / What happened next / Tension
Linked by a graph relationship (Claude Code benchmarked against Gemini); both cover CVE, Gemini; picks up the CVE thread on 2026-07-23.