Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
Source ↗
👁 0
💬 0
A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – or even a different machine signed into the same Claude account – with no browser exploit and minimal user interaction required. Anthropic, aware of the problem since May, has taken no action to close the hole.Dispatch is a feature in Claude that lets users send and manage tasks from their mobile phone or browser to Claude Desktop, an AI agent
Comments (0)