A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – or even a different machine signed into the same Claude account – with no browser exploit and minimal user interaction required, and Anthropic, aware of the problem since May, has taken no action to close the hole. Forever Security researcher Gal Weizman found that Claude Dispatch’s interface and API were reachable from an ordinary logged-in web session at claude.ai, so an extension able to control claude.ai could send commands to Claude Desktop as if from the legitimate Dispatch user. Weizman disclosed the flaw, dubbed ThisBash, to Anthropic; the company acknowledged it as a valid vulnerability in May but closed the security issue as a duplicate of a known flaw it was already tracking, did not pay a bug bounty or issue a CVE, and told him it planned to retire Dispatch at the end of October. That didn’t happen; as of October 30, the official Claude support page listed Dispatch as available in limited beta on some Pro, Max, and Ultra plans, but not available to new users. Weizman says the fundamental flaw in Claude’s design still exists and now lives on in other features like Claude Code Remote Control and Claude Cowork sessions.