Researchers demonstrated how a browser extension with script access on could interact with Claude Desktop's Dispatch feature to execute code locally.
The test was conducted by Forever Security and involved Dispatch, a feature of Claude that allows tasks to be sent from a mobile device to the desktop app. According to the researchers, the feature accepted commands from an active connection to the Claude website, even if the page did not display a relevant link. In this way, a plugin that could run code on the website was able to issue commands to the desktop app as if the user had sent them.
How the test worked
To carry out the attack, a plugin capable of executing code on Claude's website was required, as well as a user simultaneously logged into the website and the computer application with the specific feature active.
During testing, a script on the website opened Dispatch and sent four prompts asking to install a software package. The assistant asked for approval before proceeding, but confirmation buttons appeared on the website controlling the add-on, which automatically pressed the accept button every second.
↳
READ ALSO
HACKS.GR / RELATED
Cyber Attacks & Data Breaches
Attacks on cooling systems in France affected refrigerators with blood units
↗
This resulted in the software being installed and the calculator application automatically opening on the computer, without the need for any security issue in the browser.
The company's response and the withdrawal of the operation
The researchers reported the issue to Anthropic, the company that develops Claude, on May 14. The company acknowledged the issue as valid on May 19, but closed it as a duplicate.
According to the researchers, Anthropic informed them on October 13 that the feature would be retired, with a target date of the end of October. The help page states that the feature is closed to new users, while those already using it in certain programs can continue to use it for the time being.
Researchers recommend that users disable Dispatch if they don't need it, check browser add-ons and their permissions, and monitor the activity of artificial intelligence assistants.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)