Preliminary research

BragJack: extension access to privileged browser-agent channels

Gal Weizman · Forever Security · 16 September 2026

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Shows how extension-controlled network rules and trusted web origins reach privileged browser-agent interfaces. Comet exposes an unprotected testing origin; Edge combines weakened framing policy, debugger-generated gestures and a tools-mode race. Includes distinct Chrome, Opera and Claude paths.

Record

Researcher

Gal Weizman

Published by

Forever Security

Date

16 September 2026

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• Research overview
• Earlier Claude onboarding analysis
• Earlier Chrome research
• Embedded demonstration
• Embedded demonstration

Tags

• browser-extension
• ai-agent
• csp
• race-condition
• owasp-a04-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Gal Weizman, first published at the original source. Preserved copies are kept so the citation survives its host.