Fortinet Privileged Access Agent: Any Site Could Control Your Proxy and Watch Your Tab
amibeingpwned.com
The FortiPAM Chrome extension (1M+ users), used for Privileged Access Management, let any site set the browser's proxy for the session, open a new tab and stream screen recordings of it to an attacker's server. CVSS 9.1. CVE-2026-84388.