Google Assistant Authentication Bypass

Google Assistant suffered from an authentication bypass vulnerability allowing a webpage to execute commands without permission.