Anthropic Claude Code Desktop Preview Pane Credential Theft Flaw

# Anthropic Claude Code Desktop Preview Pane Credential Theft Flaw

https://gcdradar.vercel.app/incidents/anthropic-claude-code-desktop-preview-pane-credential-theft · AIR-2026-0328 · closed 2026-10-28

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-10-14
- AI role: Attack on AI
- Products: Claude Code Desktop

## Summary

A vulnerability in the preview pane of Claude Code Desktop permits malicious actors to silently steal sensitive developer credentials such as SSH keys and OAuth tokens. Anthropic faces a zero-click threat scenario requiring user mitigation.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-14: Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat (https://darkreading.com/threat-intelligence/new-anthropic-sneakpeek-silent-zero-click-threat)

## Sources

- 2026-10-14 Dark Reading: Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat https://darkreading.com/threat-intelligence/new-anthropic-sneakpeek-silent-zero-click-threat

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.