Claude Dispatch Flaw Allows Remote Code Execution via Malicious Browser Extensions
A significant vulnerability has been identified in Anthropic's Claude Dispatch, enabling malicious browser extensions to execute remote commands on connected computers, potentially across corporate networks. This flaw was reportedly discovered by security researchers. Multiple outlets confirm that Anthropic has not yet fixed this vulnerability, with some stating it has remained unpatched for at least six months. While The Register reports Anthropic's decision not to fix the flaw, tech-insider.org suggests a fix is unconfirmed until 2026. The existence and potential impact of the vulnerability are widely reported, but Anthropic's official stance and timeline for a resolution show variations across reports.
6 articles from 6 outlets covered this story. Their coverage differs on 3 points. The underlying claim is sourced from a press release.
What do all outlets agree on?
6 outlets covered “Claude Dispatch Flaw Allows Remote Code Execution via Malicious Browser Extensions”. All of them report the following:
- A vulnerability exists in Anthropic's Claude Dispatch (or Claude AI)
- The vulnerability allows malicious browser extensions to execute remote commands
- Commands can be executed on connected computers or across corporate boundaries
- Anthropic has not fixed the flaw
Did outlets disagree about this?
Yes. Coverage of “Claude Dispatch Flaw Allows Remote Code Execution via Malicious Browser Extensions” differs on 3 points. Each account below is how a different outlet described the same event:
Anthropic won't fix the flaw
Anthropic hasn't fixed the flaw for half a year
Fix unconfirmed [2026]
Which figures do outlets report differently?
1 figure in this story is reported with conflicting values:
Which outlets covered this?
All 6 articles found on this story, grouped by the stance of the piece. Every link goes to the original publisher.