CVE-2025-6179: ChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r Exploits
Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google ChromeOSto a version that resolves this vulnerability.Fixed in 16181.27.0 - Compensating control
On managed ChromeOS devices, restrict local attacker access to prevent exploitation using ExtHang3r and ExtPrint3r that can bypass extension management permissions and enable Developer Mode.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6179?
CVE-2025-6179 has been classified with a high severity rating due to its potential to allow unauthorized access to critical system functionalities.
How do I fix CVE-2025-6179?
Fixing CVE-2025-6179 involves updating to the latest version of Google ChromeOS that addresses this vulnerability.
What devices are affected by CVE-2025-6179?
CVE-2025-6179 affects managed Chrome devices running Google ChromeOS version 16181.27.0.
Can CVE-2025-6179 be exploited remotely?
No, CVE-2025-6179 requires local access to the device, as it is a local permissions bypass vulnerability.
What are the potential impacts of CVE-2025-6179?
The potential impacts of CVE-2025-6179 include disabling extensions and accessing Developer Mode, which could lead to further vulnerabilities on the device.