Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries

A critical vulnerability called ThisBash in Anthropic's Claude Dispatch feature enables any browser extension controlling claude.ai to send unauthorized commands to Claude Desktop, potentially executing code on a user's computer or connected machines. The flaw affects both consumer users (claude.ai receives ~950 million monthly visits) and enterprise clients (Cowork logged 1.2 million sampled sessions from over 600,000 organizations in May). Anthropic has been aware of the issue since May but has taken no corrective action, leaving millions of potential installations at risk.

Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Register did the reporting; read the original for the full story.