Another Data Leak Across Multiple Chrome Profiles

mikeyh
mikeyh
Community Member
edited April 2023 in 1Password 3 – 7 for Mac

Save New Login... is pulling random data from other Chrome profiles in what should be sandboxed instances: eg

  • websites
  • saved form details

Open multiple chrome profiles with different websites then use Save New Login.

eg saving secure details from one client into a client specific teams account vault added website URLs and form data from another client open in a separate Chrome profile (person) that should have been fully isolated.

For history see:


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided

Comments

  • @mikeyh,

    Thanks for the report, I've created an issue to address this and will be working on the necessary changes today.

  • jpgoldberg
    jpgoldberg
    1Password Alumni

    Hey, @rudy, please tag the issue with "Security" if you haven't already done so.

  • mikeyh
    mikeyh
    Community Member

    Do we have an update on this issue?

  • AGAlumB
    AGAlumB
    1Password Alumni

    No update at this point in the beta, but I know Rudy is looking into it.

This discussion has been closed.