Incorrect authorization in the DevTools component of Google Chrome allowed a remote attacker to bypass system access restrictions by loading a specially crafted HTML page. This flaw could enable the attacker, once the page is opened by a user, to execute privileged operations or modify system settings due to the insufficient enforcement of authorization checks for DevTools functionality.

All versions of Google Chrome prior to 157.0.8103.38 are affected, regardless of operating system. Users running earlier stable channel releases are exposed to the vulnerability.

Chromium rates the issue as medium severity and no EPSS score is presently available; the vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires a remote attacker to entice a user to load or open a crafted HTML page that exploits the DevTools authorization bypass. Although exploit evidence is not reported, the lack of proven exploitation coupled with the medium severity suggests a moderate risk that can be mitigated by updating the browser.