{"data":{"id":"25443ee7-1351-42a8-8903-0c96682a3172","title":"Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers","summary":"Forever Security researchers showed that a browser extension running scripts on claude.ai could make Claude Desktop run code on a user's computer through Dispatch, a feature for sending tasks from a phone. Dispatch accepted an ordinary signed-in claude.ai session without any visible link, so the extension could send instructions as the user. The researchers reported the flaw to Anthropic on May 14, and Anthropic reportedly said Dispatch would be retired with October as the target.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://thehackernews.com/2026/11/malicious-browser-extensions-could-use.html","publishedAt":"2026-11-06T12:06:35.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude","Claude Desktop","Claude Dispatch","Claude Code Remote Control","Claude Cowork"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-06T12:06:35.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}