SquareX released critical research exposing a hidden API in Comet that allows extensions in the AI Browser to execute local ...