Claude Dispatch design flaw let malicious browser extensions run commands on remote computers
VULNERABILITYAnthropicredteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
Researchers at Forever Security found a design flaw in Anthropic's Claude Dispatch feature. Dispatch accepted instructions from an ordinary logged-in claude.ai session, so a malicious browser extension that could control that site could send commands to the operating system, including on another computer. The attack was named ThisBash.
For IT people · Written by AI from 2 sources · Wrong?
What to do
- Remove browser extensions that you do not recognise or do not trust.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 2 outlets
Cyber Security NewsGBHackers
Who and what is in it
Companies
Products