{
  "schema_version": "1.6.0",
  "id": "CLR-2026-2997",
  "modified": "2026-07-08T00:00:00Z",
  "published": "2026-07-08T00:00:00Z",
  "summary": "A Chrome extension that strips Kling’s security headers to farm the AI service",
  "details": "The Chrome extension AutoKling (\"Auto Send Prompts & Batch Download\" for Kling) is a convenience automation tool for the Kling AI video/image service — a direct sibling of AutoHailuo (CLR-2026-2996) from the same \"autojourney\" family. To do its job it uses declarativeNetRequest to remove Kling’s Content-Security-Policy, X-Frame-Options, COOP and COEP response headers on klingai.com / kling.ai, then drives the service programmatically and batch-downloads its outputs. Stripping a site’s security headers and automating it at scale is abuse of the third-party service, not a supply-chain attack on the installer. We classify it as Abuse tooling and reported it to the Chrome Web Store.",
  "affected": [
    {
      "package": {
        "ecosystem": "Chrome",
        "name": "AutoKling"
      },
      "versions": [
        "1.0.6.0"
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://research.codelake.dev/advisories/clr-2026-2997-autokling"
    }
  ],
  "credits": [
    {
      "name": "Sascha Klein, codelake Research",
      "type": "FINDER",
      "contact": [
        "https://research.codelake.dev"
      ]
    }
  ],
  "database_specific": {
    "caseId": "CLR-2026-2997",
    "kind": "abuse",
    "class": "Abuse tooling",
    "severity": "High",
    "status": "Confirmed abuse tooling",
    "iocs": {
      "ips": [],
      "hashes": [],
      "indicators": [
        "AutoKling — Chrome Web Store id bloljhdbpajpebgkmdbjcmmnnljaknjg, v1.0.6.0",
        "declarativeNetRequest rules.json: modifyHeaders → remove Content-Security-Policy, X-Frame-Options, Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy · condition.requestDomains = klingai.com, kling.ai (main_frame, sub_frame)",
        "permissions: downloads, declarativeNetRequest, storage, notifications · host_permissions + content_scripts scoped to klingai.com / kling.ai only · NO cookies, NO",
        "autojourney Auto-* family (sibling of AutoHailuo CLR-2026-2996); bundle carries handlers/cross-promo for Kling, Poe, Sora, Grok, Google — cross-links sibling Web Store ids",
        "Over-calls verified false: exfil-to-foreign-host = downloads of the AI services’ OWN media (assets.grok.com, sora.chatgpt.com, labs.google/fx); remote-code = chrome.runtime.getURL local bundled scripts (scripts/poe.js, ops.js, main.js)",
        "NOT observed: cross-origin cookie/session theft, chrome.cookies use, or credential exfiltration — capability confined to Kling"
      ]
    }
  }
}