A use‑after‑free flaw in PrivateAI allows a remote attacker to craft an HTML page that, if a user engages in specific UI gestures, may escape Chromium’s sandbox. This leads to non‑trusted content gaining unrestricted access to system resources, effectively enabling remote code execution. The vulnerability is classified as CWE‑416 and involves an uncontrolled resource consumption issue (CWE‑825). The security severity is marked as Medium, but the CVSS score of 9.6 indicates a critical potential impact on confidentiality, integrity, and availability.

The flaw affects Google Chrome versions prior to 147.0.7727.55. All users running the stable channel before that build are susceptible. Upgrading to the latest stable release mitigates the issue.

With a CVSS score of 9.6 and an EPSS of less than 1%, the exploit probability is low but significant enough to warrant immediate action. The vulnerability is not listed in the CISA KEV catalog, suggesting no known widespread exploitation yet. An attacker requires the victim to open a crafted HTML page and perform certain UI gestures, indicating a social‑engineering component to trigger the sandbox escape.