Claude Dispatch flaw can run commands across signed-in machines
Original title: Anthropic won’t fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
Any extension that controls Claude Dispatch can drive Claude Desktop, and Anthropic has known since May.
A report says a flaw in Anthropic’s Claude products lets a browser extension that can control Claude Dispatch make Claude Desktop run code on the local computer or on another machine signed into the same Claude account. No browser exploit is required, and user interaction is minimal. The feed says Anthropic has been aware since May. The report’s title says Anthropic will not fix it.
Unconfirmed: The won’t-fix claim is in the report title; the snippet ends before Anthropic’s stated response.
- Code can run on a different machine using the same Claude account.
- The described path does not require a browser exploit.
- The available text cuts off after noting awareness since May.
Impact: Remote command execution on machines sharing a Claude account
| Product | Affected |
|---|---|
| Anthropic Claude Desktop | — |
| Anthropic Claude Dispatch | — |
- Vendors
- Anthropic
- Products
- Claude DesktopClaude Dispatch
- AI models
- Claude
From the original article
Jessica Lyons reports: A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – or even a different machine signed into the same Claude account – with no browser exploit and minimal user interaction required. Anthropic, aware of the problem since May,...
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.