Anthropic's Claude Exposes Remote Code Execution Flaw

A security researcher found a vulnerability in Anthropic's Claude products that lets malicious browser extensions take control of the AI agent and send commands that compromise the user's computer, enabling a classic escalation of privileges that gives attackers unrestricted access to the operating system and its files. The flaw affects Claude's agent functionality, where a hijacked extension can issue commands on the user's machine. The disclosure matters because it shows how extension-level access can be chained into full system control of an AI agent.