{
  "id": 18311804,
  "title": "Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries",
  "url": "https://urgent.news/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-05T13:00:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/research/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/5307684"
  },
  "original_language": "en",
  "account": "Anthropic's Claude Dispatch feature has a serious security flaw that could allow attackers to execute remote commands across corporate networks without needing to exploit a browser. This vulnerability was discovered by Forever Security researcher Gal Weizman and disclosed to Anthropic in May, but the company has not taken any action to address it. Dispatch is a feature that allows users to send and manage tasks from their mobile device or browser to Claude Desktop, an AI agent that runs commands on their computer.\n\nThe flaw exists because Claude Dispatch's interface and API are reachable from a normal web session on claude.ai. This means a malicious browser extension could send commands to Claude Desktop as if they were coming from a legitimate Dispatch user. Once the extension gains access to the files on the operating system, it can execute arbitrary code and potentially compromise the entire machine.\n\nThe vulnerability, dubbed \"ThisBash,\" allows attackers to perform a classic escalation of privileges. Anthropic acknowledged Weizman's report in May, but closed the security issue as a duplicate of a known flaw it was already tracking. Despite this, Dispatch remains available in limited beta for certain plans as of October 30.\n\nEven if Anthropic eventually retires Dispatch, the fundamental flaw in Claude's design would still exist in other features like Claude Code Remote Control and Claude Cowork sessions. Weizman has communicated all of this to Anthropic, but the company has still decided not to take any action.\n\nThe attack requires a browser extension with access to claude.ai, which can be achieved either by installing a malicious extension or by hijacking a legitimate one. The attack sequence involves registering a MAIN-world content script, opening Dispatch in a popup, initiating \"force prompting\" with the AI agent, and using a series of prompts to trick the agent into executing malicious commands.",
  "summary": "From EOP to RCE in six simple steps",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 5,
    "also_reported_by": [
      {
        "outlet": "Arabian Post",
        "title": "Anthropic to prohibit persistent abuse of Claude chatbot",
        "url": "https://urgent.news/2026/11/04/anthropic-to-prohibit-persistent-abuse-of-claude-chatbot",
        "published": "2026-11-04T14:49:47.000Z"
      },
      {
        "outlet": "The New Stack",
        "title": "“Signing in to your company’s plugins one by one is annoying”: Anthropic’s fix puts Claude in the identity business",
        "url": "https://urgent.news/2026/11/04/signing-in-to-your-companys-plugins-one-by-one-is-annoying-anthropics",
        "published": "2026-11-04T16:59:22.000Z"
      },
      {
        "outlet": "Techmeme",
        "title": "Cat Wu, who left Anthropic last week, says she is joining OpenAI to lead product manangement for core products; Wu was the product lead for Claude Code (Stephen Council/Business Insider)",
        "url": "https://urgent.news/2026/11/05/cat-wu-who-left-anthropic-last-week-says-she-is-joining-openai-to",
        "published": "2026-11-05T01:20:01.000Z"
      },
      {
        "outlet": "Tom's Hardware",
        "title": "Anthropic loosens Claude's game cloning ban",
        "url": "https://urgent.news/2026/11/05/anthropic-loosens-claudes-game-cloning-ban",
        "published": "2026-11-05T11:00:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}