CVE-2026-121030

Summary

A missing authorization check in Chrome DevTools allowed a social-engineered user to execute arbitrary code outside the sandbox by visiting a malicious page, risking full system compromise.

Exploitability

Exploitation requires user interaction (e.g., clicking a link) and social engineering to trick the victim into enabling DevTools or interacting with a crafted page; no remote code execution without user action.

Blast radius

Successful exploitation could lead to arbitrary code execution outside Chrome’s sandbox, potentially compromising the host system and enabling data theft or further lateral movement.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 157.0.8103.38 or later, as specified in the vulnerability description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.