https://reddit.com/r/netsec/comments/1wbi40d/fortinet_privileged_access_agent_any_site_could/: Fortinet Privileged Access Agent: Any Site Could Control Your Proxy and Watch Your Tab
Published Sep 9, 2026
·Updated
Affected Software
2 affected components
Fortinet FortiPAM Chrome extension
Fortinet FortiPAM Privileged Access Agent
Frequently Asked Questions
1
What does an attacker need to do to exploit this issue?
The issue can be exploited by any website. A successful phishing scenario requires the user to view sensitive information in a tab opened by the attacker.
2
What browser capabilities could a malicious site gain through the affected extension?
A malicious site could set the browser proxy for the session, open a new tab, and send screen recordings of that tab to an attacker-controlled server.
3
Who is exposed?
Users of the FortiPAM Chrome extension, including the Fortinet FortiPAM Privileged Access Agent, are the affected population described. The issue is especially relevant where users may access sensitive resources in browser tabs.