"SneakPeek": Claude Code Desktop's Preview Pane Let a Large HTML File Read and Exfiltrate Local Secrets

Claude Code in Claude Desktop before 1.30096.1

Noma Labs found that HTML files over 256 KB were loaded from disk as `file://` URLs outside the Content Security Policy applied to smaller files, and the local-file request filter only engaged when proxying a dev server. A padded coverage report planted in a repository could, when a developer asked Claude to review it, read SSH keys, AWS credentials, npm and GitHub tokens, Kubernetes and Docker credentials, and Claude's own OAuth tokens, and send them out. Anthropic's first patch was bypassed by moving the reads into a Web Worker created from a `blob:` URL. Anthropic scored it CVSS v4 8.7. Reported July 4, fixed August 17, published October 14, 2026; CVE pending

A security boundary keyed to file size and dev-server mode instead of applying to all rendered content