Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries

Security researcher Gal Weizman discovered a design flaw in Anthropic's Claude products that allows a malicious browser extension to execute remote commands across corporate boundaries via Claude Dispatch, Cowork, and Code Remote Control sessions. Anthropic acknowledged the issue as a valid vulnerability in May but ultimately closed it as a duplicate, planning to retire Dispatch while leaving the fundamental design weakness intact in newer features. The flaw enables an attacker to bridge the gap from a user's personal web session to a desktop agent on a local or remote machine, potentially infiltrating corporate environments. Open article →