Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-6179 EUVD-2025-18417GHSA-p92c-8xhp-663r

ChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r Exploits

Published Jun 16, 2025 · Updated Jun 17, 2025 · Assigned by ChromeOS

Description

Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools.

Affected products

VendorProductAffectedFixed
Google ChromeOS 16181.27.0 —

References