CVE-2025-6179 ChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r Exploits
Local attackers can bypass extension management and developer mode restrictions on managed ChromeOS devices to load unauthorized extensions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-6179?
CVE-2025-6179 is a critical vulnerability in Google Chrome Os, published on 16 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools.
Weakness: CWE-276
Which versions are affected by CVE-2025-6179?
It affects 1 product.
Products include Google Chrome Os.
How do I fix CVE-2025-6179?
No fix has been published for CVE-2025-6179 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-6179 being exploited?
There is no known exploitation of CVE-2025-6179 in the wild and no public exploit code.
Other vulnerabilities in Google Chrome Os
Sources
Also known as GHSA-p92c-8xhp-663r.