Topic: extension stomping

Perplexity Comet Browser Flaw Exposed Users to System Attacks

Security researchers discovered a critical vulnerability in Perplexity's Comet browser, where its MCP API allowed built-in extensions to execute commands on the user's operating system, bypassing standard browser protections. The flaw could enable attackers to take control of devices or deploy ma...