SecurityFan score 43 · Tier B
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers
The Hacker News · By info@thehackernews.com (The Hacker News) ·
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint security company, showed in a test. The attack needs Dispatch, a Claude feature that lets people send tasks from their…
The Brief
- Researchers at Forever Security showed in a test that a malicious browser extension could make Claude Desktop run code on a user's computer.
- The attack requires Dispatch, a Claude feature that lets people send tasks from their phone.
- The extension needs to be able to run scripts on claude.ai.
Why it matters
Developers who use Claude Desktop with Dispatch and have a malicious browser extension installed could have code run on their machine without their knowledge.
Who’s affected
- Claude Desktop users with Dispatch enabled
- Users who install browser extensions
- #security
- #browser-extensions
- #claude
- #code-execution
- #ai-agents
