Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilityhigh

Anthropic Retires Claude Dispatch Flaw Allowing Remote Code Execution

5 sources · 5 articlesFirst reported Updated ()4
What's new

November 6: Report 5 adds extensions automating approvals for npm installs and Calculator app on connected devices; Anthropic retired feature by end of October.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Malicious browser extensions hijack Claude Dispatch to run commands on user machines or connected devices without exploits; Anthropic retires the feature.

A design flaw in Anthropic's Claude Dispatch enables malicious browser extensions to execute arbitrary commands on the local computer or other machines signed into the same account via prompt injection. The vulnerability, named ThisBash, was discovered by Forever Security researcher Gal Weizman and known to Anthropic since May but unpatched. Anthropic confirmed the issue as valid and will retire Dispatch by the end of October 2026. The flaw affects claude.ai users and persists in related features like Claude Cowork, enabling cross-device corporate endpoint attacks.

Key facts
  • ThisBash allows prompt injection to run npm installs on connected computers
  • No browser exploit required; uses signed-in claude.ai sessions
  • Affects local and remote devices signed to same account
  • Known to Anthropic since May 2026; retired by end of October 2026
  • Confirmed as valid duplicate; root cause outlives feature
  • Enables global commands like opening Calculator app
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • The RegisterNamed ThisBash, known since May, no patch, millions affected, persists in Claude Cowork
  • Cyber Security NewsPrompt forcing to install npm packages, cross-device corporate endpoints, confirmed duplicate
  • GBHackersCross-device personal to work laptop attack, confirmed valid, root cause outlives Dispatch
  • The Hacker NewsDetails npm installs and Calculator app on connected devices, unsigned sessions, reported in May
Vendors
Anthropic
Products
ClaudeClaude DispatchClaude Desktopclaude.aiClaude AI
Organizations
Forever Security
AI models
Claude

Coverage

oldest first · one row per article · UTC
  1. · 4d ago The Register · SecurityFirst report

    Anthropic won't patch Claude Dispatch flaw for remote code execution

    Browser extensions can hijack Claude Dispatch to run code on user machines or other signed-in devices without exploits.

  2. · 4d ago DataBreaches.net

    Claude Dispatch flaw can run commands across signed-in machines

    Any extension that controls Claude Dispatch can drive Claude Desktop, and Anthropic has known since May.

  3. · 3d ago Cyber Security News

    Claude Dispatch flaw lets malicious browser extensions run code

    Browser extensions can force Claude agents to run commands on connected devices via prompt injection.

  4. · 3d ago GBHackers

    Claude AI flaw lets malicious extensions execute commands on remote computers

    Dispatch feature allows browser extensions to run OS commands on other machines signed into the same account.

  5. · 3d ago The Hacker News

    Malicious browser extensions exploit Claude Dispatch for remote code execution

    Researchers demonstrate extensions sending prompts via Claude Dispatch to run npm installs on connected computers; Anthropic plans to retire the feature.