The Morning Dev

Only the news worth knowing

‹
 
  • AAPL 339.69 ▼ 1.30%
  • MSFT 527.18 ▼ 1.63%
  • NVDA 190.88 ▲ 5.11%
  • GOOGL 285.18 ▲ 0.92%
  • AMZN 259.61 ▼ 0.23%
  • META 608.49 ▲ 0.56%
  • TSLA 348.96 ▲ 1.53%
  • AVGO 311.13 ▲ 6.72%
  • TSM 378.73 ▲ 7.58%
  • ORCL 119.40 ▲ 3.77%
  • AMD 442.03 ▲ 9.31%
  • NFLX 63.91 ▼ 2.52%
  • CRM 216.51 ▼ 2.64%
  • ADBE 239.06 ▼ 2.99%
  • INTC 55.02 ▲ 5.29%
  • IBM 247.11 ▼ 2.84%
  • PLTR 158.38 ▲ 2.19%
  • SNOW 279.20 ▲ 3.56%
  • NET 281.86 ▲ 14.87%
  • SAP 233.82 ▼ 4.03%
B43/100

Vulnerability · high

Malicious browser extensions could abuse Claude Dispatch to run code

Tier B · Patch this week – Put it in the sprint

Who’s exposed: Claude Desktop users with Dispatch and a malicious browser extension

Tier B because: Full takeover OR secrets exposed OR supply chain

Reach

Attack

Damage

Fix

Popular tool · Full takeover

The Brief

  • Researchers at Forever Security showed in a test that a malicious browser extension could make Claude Desktop run code on a user's computer.
  • The attack requires Dispatch, a Claude feature that lets people send tasks from their phone.
  • The extension needs to be able to run scripts on claude.ai.

Why it matters

Developers who use Claude Desktop with Dispatch and have a malicious browser extension installed could have code run on their machine without their knowledge.

The checklist behind the tier

Checklist · 3 of 10 yes
YesHits tech teamsClaude Desktop runs code on developer and IT workstations; AI assistant tools are widely used by dev teams.
NoCore infrastructureClaude Desktop with Dispatch is a single vendor product, not shared infrastructure like OpenSSH or the Linux kernel.
YesPopular toolClaude is a widely used AI assistant with a mainstream desktop app.
NoExploited in the wildThe Hacker News: researchers at Forever Security showed the attack in a test; no real-world attacks reported.
NoPublic exploitThe Hacker News: researcher demonstration described; no source says exploit code or a PoC was published.
NoRemote, no loginThe Hacker News: attack needs a malicious browser extension and Dispatch, so user-installed extension is required.
YesFull takeoverThe Hacker News: extension could make Claude Desktop run code on a person's computer, i.e. code execution.
NoSecrets exposedThe Hacker News: only demonstrated code execution; no source reports stolen credentials or data.
NoSupply chainThe Hacker News: attack uses malicious browser extensions, but no source reports a compromised legitimate package or update.
NoNo fix yetThe Hacker News snippet does not state whether Anthropic has shipped a fix.

Source

Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers ↗ The Hacker News · 2h ago

First seen · 1 source · Full story page · How tiers are decided