Skip to content
Hot storiesContinuously updated

Claude Dispatch被曝存在未修复跨端RCE漏洞

1 reports1 reporting sourcesUpdated 3 hours ago

Start here

AI overview

2026年11月5日，安全研究员公开披露Anthropic旗下的Claude Dispatch存在设计缺陷，且该漏洞尚未得到修复。报道指出，恶意浏览器扩展程序可利用该缺陷劫持用户的claude.ai网页会话，并借此向Claude Desktop应用下发指令，最终在用户主机乃至同一账号关联的其他设备上实现跨端远程代码执行（RCE）。

AI-generated from reports · Updated 3 hours ago

Latest developmentsNov 5 22:42
研究员披露Claude Dispatch未修复设计缺陷，可致跨端远程代码执行。

Report timeline

Follow the reports to see different sides of the story.

Nov 5
  1. Hacker News · AISelected
    Anthropic Leaves Claude Dispatch Cross-Device Remote Code Execution Flaw Unpatched

    Security researchers revealed a design flaw in Anthropic's Claude Dispatch, where a malicious browser extension could hijack a claude.ai session to issue commands to Claude Desktop, achieving remote code execution on the host machine and other devices associated with the same account.

Story heat trend

Current heat 9·Comparable peak 10（Nov 6 00:00）·Comparable change, last 24 hours–

02.557.510Nov6Nov6Nov6Nov6

Trends compare only the same parties observed continuously, so the scope can be narrower than current heat counts. Move the pointer or tap the chart to see hourly heat; use the left and right arrow keys on a keyboard.