Researchers demonstrated that a malicious browser extension with access to claude.ai can hijack the Claude Dispatch feature to execute arbitrary code locally via Claude Desktop. This vulnerability highlights potential cross-context risks in AI desktop integrations, allowing attackers to leverage trusted application workflows against endpoints.

browser extensionclaude desktopcode executiondispatch
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →