The flaw could let malicious extensions with only basic permissions hijack the Live panel.
Part of the PlainSec briefing for 2026-03-06