Vulnerability · 2 sources · latest 3h

Anthropic won't fix Claude Dispatch flaw allowing remote command execution

VULNERABILITYAnthropicredteam/daily · 2 sources

Severity: High
Sources: 2

What happened

A flaw in Anthropic's Claude products allows any browser extension able to control Claude Dispatch to make Claude Desktop execute code on the local machine, or on a different machine signed into the same Claude account. No browser exploit is needed and minimal user interaction is required. Anthropic has been aware of the issue since May but will not fix it.

For IT people · Written by AI from 2 sources · Wrong?

What to do

Review the browser extensions installed in your browser and remove any that can control Claude or Claude Dispatch and that you do not need.
Limit which machines are signed into the same Claude account until the issue is addressed.

Written by AI from the sources, checked against them

Read the full story at the source