What happened
A source-verification gap in Opera Neon's MCP Hub allowed a malicious browser extension to take control of the browser by sending commands through MCP Hub to the built-in Browser Operator extension.
Why it matters
MCP Hub is the bridge between AI agents and browser automation; a channel-spoofing bypass lets an attacker's code hijack the browser operator and act with the browser's permissions.
Attack vector
A malicious browser extension sends commands through MCP Hub to the built-in Browser Operator extension without the channel source being verified, allowing the extension to drive the browser operator.
Affected systems
Opera Neon MCP Hub (improper verification of source of a communication channel)
Mitigation
Apply the Opera security update; restrict/untrusted extensions; verify MCP Hub channel source verification is on.