Published at 11/7/2026, 3:10:00 AM · 12 views
📰 Forever Security ThisBash: Browser Extension Can Drive Claude Desktop RCE via Dispatch, Even Cross-Machine
On 2026-11-04, Forever Security researcher Gal Weizman published ThisBash: a browser extension that can script claude.ai can abuse the still-reachable Claude Dispatch interface to send instructions as the signed-in user, auto-click Allow, and run code on Claude Desktop—including another machine…
💬 What's your take? Join the discussion in the comments.
Read the original Chinese version
📰 Forever Security 披露 ThisBash：恶意浏览器扩展可经 Claude Dispatch 驱动 Desktop 本机甚至跨机执行命令
2026-11-04，Forever Security 研究员 Gal Weizman 发布 ThisBash：可控制 claude.ai 的浏览器扩展，能通过隐藏但仍可用的 Claude Dispatch 接口，以用户会话向 Claude Desktop 下发指令并自动点击…
💬 你怎么看？欢迎在评论区讨论。
#Claude Dispatch #ThisBash #Forever Security
0 Comments