Malicious browser extensions run code via Claude Dispatch

Researchers at Forever Security discovered that malicious browser extensions running scripts on claude.ai can exploit Claude Dispatch to execute code on users' Claude Desktop instances. Claude Dispatch enables task delegation from mobile devices to the desktop application. The vulnerability remains exploitable. Users should review browser extension permissions and disable unused extensions.