Tag: cross device attack

Browser Extensions Expose Flaw in Claude AI System

Researchers at Forever Security have uncovered a vulnerability in the Claude AI System, demonstrating a live proof-of-concept where a malicious browser extension could trick Claude Desktop into running system-level commands on a user's computer. This flaw was cleverly exploited using the Claude Dispatch feature, highlighting a potential security risk.