Claude Desktop Extensions RCE

Anthropic Claude Desktop (Chrome, iMessage, Apple Notes extensions)

Command injection in three official Anthropic-written extensions; SSH keys, AWS credentials, browser passwords exposed; CVSS 8.9

Unsanitized input handling; no sandboxing for Desktop Extensions