Exploit in Claude Dispatch Allows Malicious Browser Extensions to Execute Code on User Devices

Researchers at Forever Security demonstrated a vulnerability in Claude Dispatch that allows malicious browser extensions to execute code on user devices. The flaw remains exploitable, enabling tasks to be sent from phones to Claude Desktop for unauthorized execution.

A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint security company, showed in a test.

The attack needs Dispatch, a Claude feature that lets people send tasks from their phone to Claude Desktop. The flaw that makes this possible can still be exploited, the researchers said earlier this

Read original article