PulseAugur
EN
LIVE 15:27:41

Anthropic's Claude Desktop vulnerable to local command execution via browser add-on

By PulseAugur Editorial · [1 sources] ·

Researchers have demonstrated a security vulnerability in Anthropic's Claude Desktop application, where a browser extension could exploit the Dispatch feature to execute local commands. The exploit involved a malicious script on the Claude website interacting with the Dispatch feature, which normally allows tasks to be sent from a mobile device to the desktop app. While the assistant required user approval, the add-on could automatically confirm commands, leading to software installation and application execution without browser vulnerabilities. Anthropic acknowledged the issue, initially marking it as a duplicate, but has since retired the Dispatch feature to address the concern. AI

IMPACT Highlights potential risks of AI assistant integrations with local systems and the need for robust security measures.

RANK_REASON Security vulnerability discovered in a specific feature of an AI product.

Read on dev.to — Anthropic tag →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Anthropic's Claude Desktop vulnerable to local command execution via browser add-on

How we ranked this

Signal score
28 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security vulnerability discovered in a specific feature of an AI product.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
safety, product
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. dev.to — Anthropic tag TIER_1 English(EN) · Hacks.gr ·

    Test shows how browser add-on could give commands to computer via Claude

    <p>Researchers demonstrated how a browser extension with script access on could interact with Claude Desktop's Dispatch feature to execute code locally.</p> <p>The test was conducted by Forever Security and involved Dispatch, a feature of Claude that allows tasks to be sent from …

RELATED ENTITIES

RELATED TOPICS