CVE-2026-94181

Affected versions of Arc are vulnerable to an address bar spoofing issue that enables attackers to manipulate the browser's address bar using a <select> element, potentially misleading users about the origin of the content displayed. This vulnerability poses a significant risk as it can facilitate phishing attacks and other malicious activities by obscuring the true URL. Organizations using Arc should prioritize addressing this vulnerability to protect users from potential exploitation.