Browser Extensions Expose Flaw in Claude AI System

Researchers at Forever Security demonstrated a live proof-of-concept in which a malicious browser extension tricked Claude Desktop into running system-level commands on a user's computer, exploiting the Claude Dispatch feature. The finding exposes a security risk in Anthropic's Claude AI System, where an extension could escalate from browser-level access to executing commands on the host machine.

Researchers at Forever Security have uncovered a vulnerability in the Claude AI System, demonstrating a live proof-of-concept where a malicious browser extension could trick Claude Desktop into running system-level commands on a user's computer. This flaw was cleverly exploited using the Claude Dispatch feature, highlighting a potential security risk.