Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries

Security researcher Gal Weizman of Forever Security found that Claude Dispatch's interface and API could be reached from an ordinary logged-in claude.ai session, letting any browser extension controlling that session command Claude Desktop to run code on the user's machine or another device on the same account.