SquareX Uncovers Hidden Comet Browser API Allowing Local Command Execution, Raising Major Security Red Flags
In a revelation that’s likely to ignite the next major security debate in the AI browser race, cybersecurity firm SquareX has exposed a powerful, undocumented API inside the Comet browser (Perplexity’s AI browser) that allows embedded extensions to run arbitrary local commands—effectively granting full device control.
