Claude Dispatch Flaw Lets Browser Extensions Run Code on PCs
Researchers at Forever Security demonstrated that a malicious or compromised browser extension running on claude.ai could abuse Claude's Dispatch feature to silently issue commands to Claude Desktop, achieving arbitrary code execution on the user's machine. The attack chain requires no browser exploit — only a signed-in session and Dispatch enabled — and Claude's own confirmation prompts are auto-clicked by the extension script. Anthropic acknowledged the flaw in May 2026 and has signalled Dispatch will be retired, though the feature remains partially active.