SquareX released critical research exposing a hidden API in Comet that allows extensions in the AI Browser to execute local ...
SquareX discovered hidden MCP API in Comet browser enabling arbitrary local command execution Vulnerability in Agentic extension could let attackers hijack devices via compromised perplexity.ai site ...