Anthropic won’t fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries

A vulnerability in Anthropic’s Claude products lets any browser extension able to control Claude Dispatch make Claude Desktop run code on the user’s computer — or on a different machine signed into the same Claude account — with no browser exploit and minimal user interaction, The Register reports. Anthropic has known about the issue since May and is declining to fix it.