Claude Dispatch "ThisBash": any browser extension on claude.ai can make Claude Desktop run code, and Anthropic won't fix it ยท updates https://pwn.watch/i/claude-dispatch-thisbash-extension-to-desktop-rce-nov-2026 Forever Security researcher Gal Weizman found that Claude Dispatch, the feature that sends tasks from phone or browser to the Claude Desktop agent, is reachable from an ordinary logged-in claude.ai web session. A browser extension that can run scripts on claude.ai can look up the user's Claude Desktop Dispatch session with the user's own cookies, push prompts into it until the agent complies, and auto-click Allow on approval prompts, getting the desktop agent to run commands such as installing a malicious npm package. Because Dispatch works across machines, a compromised browser on one computer can reach Claude Desktop on another computer signed into the same Claude account, for example a work laptop logged into a personal account. Anthropic accepted the report in May, closed it as a duplicate of a known issue, issued no CVE and said it planned to retire Dispatch at the end of October; as of Oct 30 its support page still listed Dispatch in limited beta for existing users. Weizman says the same design weakness also exists in Claude Code Remote Control and Claude Cowork sessions on the web. The attack needs a malicious or hijacked extension with access to claude.ai and the user signed in to both claude.ai and Claude Desktop. en Thu, 05 Nov 2026 00:00:00 GMT Claude Dispatch "ThisBash": any browser extension on claude.ai can make Claude Desktop run code, and Anthropic won't fix it: The Register publishes the research (dubbed ThisBash) with the six-step attack chain; Anthropic did not respond to its questions. https://pwn.watch/i/claude-dispatch-thisbash-extension-to-desktop-rce-nov-2026 https://pwn.watch/i/claude-dispatch-thisbash-extension-to-desktop-rce-nov-2026#2026-11-05-45a12b2f Thu, 05 Nov 2026 00:00:00 GMT high <p><a href="https://www.theregister.com/research/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/5307684">Source</a></p> Claude Dispatch "ThisBash": any browser extension on claude.ai can make Claude Desktop run code, and Anthropic won't fix it: Claude's support page still lists Dispatch as available in limited beta on some Pro, Max and Ultra plans for existing users, though not for new users. https://pwn.watch/i/claude-dispatch-thisbash-extension-to-desktop-rce-nov-2026 https://pwn.watch/i/claude-dispatch-thisbash-extension-to-desktop-rce-nov-2026#2026-10-30-7a6e2680 Fri, 30 Oct 2026 00:00:00 GMT high <p><a href="https://www.theregister.com/research/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/5307684">Source</a></p> Claude Dispatch "ThisBash": any browser extension on claude.ai can make Claude Desktop run code, and Anthropic won't fix it: Weizman reports the Dispatch flaw to Anthropic, which acknowledges it as valid but closes it as a duplicate of a known issue, pays no bounty, issues no CVE and says it plans to retire Dispatch at the end of October. https://pwn.watch/i/claude-dispatch-thisbash-extension-to-desktop-rce-nov-2026 https://pwn.watch/i/claude-dispatch-thisbash-extension-to-desktop-rce-nov-2026#2026-05-c48b3013 Fri, 01 May 2026 00:00:00 GMT high <p><a href="https://www.theregister.com/research/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/5307684">Source</a></p>