Inappropriate implementation in File System Access in Google Chrome prior to 149

#!/usr/bin/env python3
# check_chrome_cve_2026_11258.py
# Exit codes:
#   0 = PATCHED
#   1 = VULNERABLE
#   2 = UNKNOWN

import os
import platform
import re
import shutil
import subprocess
import sys

FIX_VERSION = (149, 0, 7827, 53)
VERSION_RE = re.compile(r'(\d+)\.(\d+)\.(\d+)\.(\d+)')


def parse_version(s):
    if not s:
        return None
    m = VERSION_RE.search(s)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def compare(v1, v2):
    return (v1 > v2) - (v1 < v2)


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, timeout=10)
        out = (p.stdout or '') + '\n' + (p.stderr or '')
        return out.strip()
    except Exception:
        return ''


def get_version_linux():
    candidates = [
        ['google-chrome', '--version'],
        ['google-chrome-stable', '--version'],
        ['chromium', '--version'],
        ['chromium-browser', '--version'],
    ]
    for cmd in candidates:
        if shutil.which(cmd[0]):
            out = run_cmd(cmd)
            v = parse_version(out)
            if v:
                return v, ' '.join(cmd)
    return None, ''


def get_version_macos():
    app_paths = [
        '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
        os.path.expanduser('~/Applications/Google Chrome.app/Contents/MacOS/Google Chrome'),
        '/Applications/Chromium.app/Contents/MacOS/Chromium',
    ]
    for p in app_paths:
        if os.path.exists(p):
            out = run_cmd([p, '--version'])
            v = parse_version(out)
            if v:
                return v, p
    return None, ''


def get_version_windows():
    reg_queries = [
        ['reg', 'query', r'HKCU\Software\Google\Chrome\BLBeacon', '/v', 'version'],
        ['reg', 'query', r'HKLM\Software\Google\Chrome\BLBeacon', '/v', 'version'],
        ['reg', 'query', r'HKLM\Software\WOW6432Node\Google\Chrome\BLBeacon', '/v', 'version'],
        ['reg', 'query', r'HKCU\Software\Chromium\BLBeacon', '/v', 'version'],
        ['reg', 'query', r'HKLM\Software\Chromium\BLBeacon', '/v', 'version'],
    ]
    for cmd in reg_queries:
        out = run_cmd(cmd)
        v = parse_version(out)
        if v:
            return v, ' '.join(cmd)

    exe_candidates = [
        os.path.join(os.environ.get('ProgramFiles', r'C:\Program Files'), 'Google', 'Chrome', 'Application', 'chrome.exe'),
        os.path.join(os.environ.get('ProgramFiles(x86)', r'C:\Program Files (x86)'), 'Google', 'Chrome', 'Application', 'chrome.exe'),
        os.path.join(os.environ.get('LocalAppData', ''), 'Google', 'Chrome', 'Application', 'chrome.exe'),
    ]
    for p in exe_candidates:
        if p and os.path.exists(p):
            out = run_cmd([p, '--version'])
            v = parse_version(out)
            if v:
                return v, p
    return None, ''


def main():
    system = platform.system().lower()
    version = None
    source = ''

    if 'linux' in system:
        version, source = get_version_linux()
    elif 'darwin' in system:
        version, source = get_version_macos()
    elif 'windows' in system:
        version, source = get_version_windows()
    else:
        print('UNKNOWN: unsupported platform {}'.format(platform.system()))
        sys.exit(2)

    if not version:
        print('UNKNOWN: could not determine installed Chrome/Chromium version')
        sys.exit(2)

    if compare(version, FIX_VERSION) < 0:
        print('VULNERABLE: detected version {} via {} (fixed at {}.{}.{}.{})'.format(
            '.'.join(map(str, version)), source, *FIX_VERSION
        ))
        sys.exit(1)
    else:
        print('PATCHED: detected version {} via {} (meets/exceeds {}.{}.{}.{})'.format(
            '.'.join(map(str, version)), source, *FIX_VERSION
        ))
        sys.exit(0)


if __name__ == '__main__':
    main()