Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:inbox_foundry:activeinbox:*:*:*:*:*:chrome:*:*

1 brief RSS
high advisory

ActiveInbox Extension Hard-coded Google OAuth Client Secret

The ActiveInbox Chrome extension up to version 7.10.24 contains hard-coded Google OAuth Client Secrets in its service worker, potentially enabling unauthorized API access and OAuth flow manipulation.

ActiveInbox Extension credential-exposure chrome-extension oauth cve-2026-82808
1t 1c