CVE-2026-17991 describes a vulnerability in Google Chrome's AI component where insufficient validation of untrusted input could allow a remote attacker to perform a sandbox escape. The attacker must have already compromised the renderer process to exploit this flaw. Exploitation is achieved via a crafted HTML page. The vulnerability affects Google Chrome versions prior to 151.0.7922.72. Google has addressed the issue in the stable channel update released for desktop. Chromium has rated the security severity of this vulnerability as Low. Despite the low severity rating by Chromium, the potential for sandbox escape elevates its practical risk. Users are advised to update to Chrome version 151.0.7922.72 or later to mitigate this vulnerability.