Is Jabra ChromeHost (Chrome Extension) safe?

Jabra ChromeHost relays arbitrary web page messages to a native host controlling Jabra device state, without origin validation.

The extension bridges web pages to a locally installed native host (com.jabra.nm) that controls Jabra headset state such as muting and call handling. Any web page can post a specially structured message to the content script, which forwards it verbatim to the native host with no origin check beyond verifying the message came from the same frame. Additionally, responses from the native host — including device enumeration results and headset events — are broadcast to all open tabs rather than only the originating tab.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.