Vulnerability · 2 sources · latest 3h

Anthropic won't fix Claude Dispatch flaw allowing remote command execution

VULNERABILITYAnthropicredteam/daily · 2 sources

Severity: High
Sources: 2

What happened

A weakness in Anthropic's Claude apps lets a browser add-on that can control Claude Dispatch make Claude Desktop run code on the user's computer. The same code can also run on another machine signed into the same Claude account. Anthropic has said it will not fix the problem.

Like I’m new · Written by AI from 2 sources · Wrong?

What to do

Review the browser extensions installed in your browser and remove any that can control Claude or Claude Dispatch and that you do not need.
Limit which machines are signed into the same Claude account until the issue is addressed.

Written by AI from the sources, checked against them

Read the full story at the source