Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries

A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – or even a different machine signed into the same Claude account – with no browser exploit and minimal user interaction required. Anthropic, aware of the problem since May, has taken no action to close the hole.

Dispatch is a feature in Claude that lets users send and manage tasks from their mobile phone or browser to Claude Desktop, an AI agent that runs commands on their computer.

Forever Security researcher Gal Weizman discovered that Claude Dispatch’s interface and API were reachable from an ordinary logged-in web session at claude.ai. So a browser extension able to control claude.ai could send commands to Claude Desktop as if they came from the legitimate Dispatch user.

“That extension was able to perform a classic escalation of privileges. Because now Claude has access to the files in the operating system, it …