Malicious Browser Extensions Abuse Claude Dispatch to Execute Code

# Malicious Browser Extensions Abuse Claude Dispatch to Execute Code

https://gcdradar.vercel.app/incidents/malicious-browser-extensions-abuse-claude-dispatch-to-execut · AIR-2026-1811 · live

- Lane: Research
- Severity: 1 (Research / proof of concept): Research proof of concept demonstrating code execution via AI desktop integration.
- Fix status: Fix status unknown
- First reported: 2026-11-06
- AI role: Attack on AI
- Products: Claude Desktop, Claude Dispatch

## Summary

Researchers demonstrated that malicious browser extensions interacting with claude.ai can trick Claude Desktop into running arbitrary code via the Dispatch feature. The underlying security issue remains exploitable.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Affected and fixed versions

- Affected: Claude Desktop
- Affected: Claude Dispatch

## Latest updates

- 2026-11-06: Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers (https://thehackernews.com/2026/11/malicious-browser-extensions-could-use.html)

## Sources

- 2026-11-06 The Hacker News: Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers https://thehackernews.com/2026/11/malicious-browser-extensions-could-use.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.