Forever Security finds Claude Dispatch flaw allowing malicious extensions to run code

A vulnerability researchers at Forever Security, an endpoint security firm, uncovered demonstrates how a malicious browser extension might enable Claude Desktop to execute code directly on a user's machine. This potential threat hinges on the use of Dispatch, a specific Claude capability allowing users to transmit tasks from their mobile devices to the Claude Desktop application. In their testing, the security experts proved that this exploitable weakness remains present.