GoPlus: Versions below 1.0.41 of the Claude Chrome extension contain a high-risk vulnerability and must be updated promptly.

金色财经_ · 2026-03-27T08:44:08+00:00

On March 27, according to GoPlus citing the Koi report, the Claude Chrome extension under Anthropic has a high-risk prompt injection vulnerability, affecting all versions below 1.0.41. GoPlus recommends users update the Claude extension to version 1.0.41 or above immediately and remain vigilant against phishing links. GoPlus states that attackers can hijack users' Claude extensions through malicious web pages and send malicious prompts, seamlessly taking over browser sessions and executing data theft.

金色财经_

2026-03-27 08:44:08

March 27 news: According to a Koi report cited by GoPlus, the Anthropic-owned Claude Chrome plugin has a critical prompt injection vulnerability, and all plugins below version 1.0.41 are affected. GoPlus advises users to immediately update the Claude extension to version 1.0.41 or higher, and to stay alert for phishing links.
GoPlus states that attackers can hijack a user’s Claude plugin through a malicious webpage and deliver a malicious prompt, taking over the browser session without the user noticing and carrying out data theft.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

2 Likes