PatchGap
Chrome · Transactions Platform

CVE-2026-106371

Authorization Error in Transactions Platform
Low chrome Authorization Error 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
ImpactIncorrect authorization in Transactions Platform
DescriptionIncorrect authorization in Transactions Platform
ComponentTransactions Platform
Bug ClassAuthorization Error
Tracker553326010
Fix commit26d827abbd00 (chromium/src) +268/-142
CISA KEVNot listed
CreditedGoogle
Disclosed2026-10-06

Files Changed

  • chrome/browser/autofill/otp_filling_safe_browsing_checker_client_unittest.cc
  • components/autofill/core/browser/integrators/one_time_tokens/otp_manager_impl.h
  • components/autofill/core/browser/integrators/one_time_tokens/otp_manager_impl.cc
  • chrome/browser/ui/autofill/chrome_otp_phish_guard_delegate_unittest.cc
  • components/autofill/core/browser/integrators/one_time_tokens/mock_otp_manager.h
  • chrome/browser/autofill/otp_filling_safe_browsing_checker_client.h
  • chrome/browser/autofill/otp_filling_safe_browsing_checker_client.cc
  • components/autofill/core/browser/integrators/one_time_tokens/otp_phish_guard_delegate.h
  • components/autofill/core/browser/integrators/one_time_tokens/otp_manager.h
  • components/autofill/core/browser/suggestions/one_time_passwords/otp_suggestion_generator.cc
  • chrome/browser/ui/autofill/chrome_otp_phish_guard_delegate.cc
  • components/autofill/core/browser/integrators/one_time_tokens/otp_manager_impl_unittest.cc
  • chrome/browser/ui/autofill/chrome_otp_phish_guard_delegate.h
  • components/autofill/core/browser/foundations/browser_autofill_manager.cc

Original Bug Report

The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.
On This Page