Anthropic won't patch Claude Dispatch flaw for remote code execution
Original title: Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
Browser extensions can hijack Claude Dispatch to run code on user machines or other signed-in devices without exploits.
A flaw in Anthropic's Claude Dispatch lets browser extensions control Claude Desktop to execute remote commands on the user's computer or another machine signed into the same account. Researcher Gal Weizman discovered the vulnerability called ThisBash, which Anthropic has known about since May but has not patched. The company plans to retire Dispatch by end of October without a fix. The flaw affects millions of users and persists in related features like Claude Cowork.
Unconfirmed: Anthropic's exact timeline for retiring Dispatch
- Allows code execution on user computer or different machine
- Known to Anthropic since May with no patch
- Retirement planned but not yet implemented
- Affects claude.ai and Dispatch feature
- Potential for supply-chain hijacks of extensions
From the original article
7 min read at theregister.comA vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – or even a different machine signed into the same Claude account – with no browser exploit and minimal user interaction required. Anthropic, aware of the problem since May, has taken no action to close the hole.
By Jessica Lyons · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.