# Claude flaw could let malicious extensions run commands on linked machines

- URL: https://talkfuse.com/story/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/
- Published: 2026-11-05T13:00:00+00:00
- Updated: 2026-11-05T13:28:17+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/research/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/5307684
- Topics: AI, Technology

## Key points

- A browser extension could use Claude sessions to run commands on a computer.
- Anthropic acknowledged the flaw in May but did not fix it.
- The researcher says related Claude features may share the design weakness.

## Summary

A vulnerability in Anthropic’s Claude products could let a browser extension with access to claude.ai send commands to Claude Desktop, potentially running code on the computer or another machine using the same account. Researcher Gal Weizman says the flaw, which Anthropic has known about since May, reflects a broader design weakness that may also affect Claude Cowork and Code Remote Control.

The attack requires a user to be signed in to Claude on the web and to have a suitably accessible desktop or remote session; a malicious extension could be installed through deception or by hijacking a legitimate one. Anthropic acknowledged Weizman’s report as valid but closed it as a duplicate, did not issue a CVE or bounty, and said it planned to retire Dispatch by the end of October. On 30 October, its support page still described Dispatch as available to some existing subscribers, while the article says the underlying risk may persist in other features.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.