Open tabs are the web pages currently loaded in a browser. They may show sensitive information, contain completed forms, or provide access to signed-in accounts. An extension that can read tabs may be able to use page content as context, depending on its permissions and the browser’s access rules.
This matters because access to a tab can expose information or enable actions within a website. In real attacks, malicious or misleading page content may try to influence an AI browser assistant, while overly broad extension permissions can increase the amount of data at risk. Defenses include limiting extensions’ site access, reviewing permissions, closing sensitive tabs when they are not needed, and requiring confirmation before consequential actions such as submitting forms or downloading files.