DEBIAN-CVE-2026-121136: Debian/chromium vulnerability
Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 157.0.8103.38
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
The attacker must use social engineering and crafted network traffic. The issue is described as allowing a bypass of system access restrictions through missing authorization in DevTools.
Which deployments are affected?
The affected software listed is Debian's chromium package. The issue applies to Google Chrome versions prior to 157.0.8103.38; the provided data does not identify specific Debian package versions or configuration prerequisites.